We speak with firms falling within scope of DORA every day. Many have commonly shared views that are in fact dangerous myths, perpetuated through misunderstanding or misinformation.
These myths are jeopardising the likelihood of these firms hitting the January 2025 DORA compliance deadline and also have the potential to cause long-lasting harm.
In this eBook Gieom’s regulatory subject matter experts, Advisory Board members and partners highlight the myths, the risks of believing them and the reality.
To download the resource, please provide your details below.
We speak with firms falling within scope of DORA every day. Many have commonly shared views that are in fact dangerous myths, perpetuated through misunderstanding or misinformation.
These myths are jeopardising the likelihood of these firms hitting the January 2025 DORA compliance deadline and also have the potential to cause long-lasting harm.
In this eBook Gieom’s regulatory subject matter experts, Advisory Board members and partners highlight the myths, the risks of believing them and the reality.
MYTH 1 We coped with COVID, so job done on resilience
MYTH 2 DORA is a cybersecurity regulation, so IT and Info Security have it covered
MYTH 3 The DORA deadline may change and, even then, we’re under the regulator’s radar
MYTH 4 We can run our operational resilience controls off a spreadsheet
MYTH 5 We have all the data we need to conduct DORA scenario testing
MYTH 6 We are ISO 27001 certified, so we are DORA compliant
MYTH 7 ICT Service Providers not named on the DORA critical suppliers list don’t have to comply
Contributors:
Jimi Hinchliffe, Bhavana Mallesh, Andrew Sheen, Gary Penolver, Antony Bream, Nicola Cowburn, Vinod Menon
