Leverage robust capabilities to help meet key requirements and manage compliance with DORA.

Evolve your digital supply chain into a strategic asset and enhance Information and Communication Technology (ICT) resilience to reduce operational disruptions.

Leverage robust capabilities to help meet key requirements and manage compliance with DORA.

Inventory and connect your entire IT ecosystem to identify, measure and monitor risk, and inform decisions to improve security posture and streamline compliance with OneTrust IT Risk Management.

Streamline ICT control implementations and oversight leveraging our proprietary evidence framework to de-duplicate workstreams, tailored project management and dynamic reporting with Compliance Automation.

Centralize your control library, workpapers, and audit tasks. Streamline evidence collection across systems, departments, and teams. Gain visibility into audit status with reports and dashboards with OneTrust Audit Management.

Leverage a centralized regulatory research platform built by a network of in-house researchers, hundreds of legal experts, and translators with OneTrust DataGuidance.

We provide answers to some frequently asked questions below.

The Digital Operational Resilience Act (DORA) is a mandatory European Union (EU) regulation that entered into force on January 16, 2023 and will apply as of January 17, 2025.


The regulation aims at strengthening the IT security of financial entities such as banks, insurance companies and investment firms. The goal is to help ensure that the financial sector in Europe can stay resilient in the event of a severe operational digital disruption.


DORA requirements bring harmonization of the rules relating to operational resilience for the financial sector applying to 20 different types of financial entities and ICT third-party service providers.

The financial sector is increasingly dependent on technology and on tech companies to deliver financial services. This makes financial entities vulnerable to cyber-attacks or cybersecurity incidents.


When not managed properly, ICT risks can lead to disruptions of financial services offered across borders. They can have an impact on other companies, sectors, and even on the rest of the economy, which underlines the importance of the digital operational resilience of the financial sector.

DORA primarily applies to digital services providers, including online platforms, cloud computing services, and search engines, operating within the EU. Specific institutions include but are not limited to:


DORA aims to ensure the resilience of digital services and the protection of users’ interests by covering various topics, including: