- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By 
Neil Hodge2024-08-05T13:01:00
Legislation set to take effect next year will require financial services firms operating in the European Union to implement stronger measures to protect not only themselves from disruption caused by cyberattacks but also the sector as a whole.
The EU’s Digital Operational Resilience Act (DORA), which will be fully enforced on January 17, 2025, aims to address the increasing reliance of banks, insurers, and other firms on information and communication technology (ICT) systems and third-party IT providers. It seeks to ensure that the financial sector is better equipped to withstand and recover from operational disruptions caused by IT and cyber-related incidents.
The legislation also places significant focus on the large, “critical” tech firms upon which the sector depends, imposing more stringent compliance and regulatory requirements to ensure these firms can handle cyber-related risks and maintain the outsourced services provided to financial firms.
THIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.
News and analysis for the well-informed compliance or audit exec. Select an option and click continue.
Annual Membership $499 Value offer
Full price one year membership with auto-renewal.
Membership $599
One-year only, no auto-renewal.
This presentation will provide an overview of the key provisions of DORA and their implications for Third-Party Risk Management (TPRM) teams, list best practices for DORA preparation and review key considerations for teams looking to implement the DORA framework.
Join us for an in-depth discussion on proven strategies, advanced technologies, and industry best practices that form the bedrock of operational resilience.
The Basel Committee on Banking Supervision is seeking comment from the financial services industry on its proposed principles for operational resilience that aim to enhance banks’ ability to withstand, adapt to, and recover from potentially severe adverse events.
Any product that uses AI needs to be safety assessed for its entire lifespan under new rules that went into effect recently across the EU. Experts warned companies using AI to tailor products could be classed as “manufacturers” and face the same duty of care as developed.
When lawmakers slam the U.K.’s chief financial regulator as “incompetent,” it not only opens the doors for others to pile criticism on it, but it sparks a debate about how the organization can be improved–or removed.
The U.K. Financial Conduct Authority apologized to investors in peer-to-peer investment firm Collateral for not acting swiftly enough to prevent Collateral from defrauding its customers.
