The Digital Operational Resilience Act [DORA] for Financial Services

The DORA regulation will come into effect on 17th January 2025.

learn more
00
DAYS
00
HOURS
00
MINUTES
00
SECONDS

Due to their dependency on technology, financial service companies are increasingly vulnerable to operational disruption and data loss , including cloud platforms and business applications. 

To reduce these risks and to improve operational resilience, the EU enacted the Digital Operational Resilience Act (DORA).

DORA requires backups to be stored outside of your primary SaaS application to ensure that they remain insulated from issues affecting the primary data.

In addition, DORA also requires testing the ability to restore and recover from a backup.

DORA graphic

helpful RESOURCES

When restoring backup data using own systems, financial entities shall use ICT systems that are physically and logically segregated from the source ICT system. The ICT systems shall be securely protected from any unauthorized access or ICT corruption and allow for the timely restoration of services making use of data and system backups as necessary.

Article 12, Digital Operational Resilience Act
Own solutions help customers satisfy these legislative requirements for their critical SaaS data and continuously improve their SaaS data security and resiliency, as well as provide documentary-evidence supporting compliance reporting.
eBook

Shared Responsibility Playbook

You might assume that if it’s in the cloud, it’s protected. But for most SaaS apps there is a shared responsibility for keeping data safe. Learn more about the shared responsibility model and how you can start protecting your data.
eBook

How Independent Backup Helps Mitigate the Impact of SaaS Data Loss

Learn why it's critical to keep your backups separate from your primary data and how to tell if your backup solution is independent.
blog

23 NYCRR 500: How Financial Institutions and Insurers Can Accelerate Compliance for SaaS Data

Eoghan Casey
blog

The Growing Importance of Backup and Recovery Compliance

Mike Melone
blog

NYDFS Emphasizes Data Protection and Business Continuity in Updated 23 NYCRR 500 Cybersecurity Regulation

Own and PwC

Get started

Share your details and we’ll contact you shortly to schedule a custom 25-minute demo.

Schedule a Demo