Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

kroll

Threat-Led Pen Testing and Its Role in DORA Compliance

Feb 25, 2025 By Kroll In Kroll
Threat-led penetration testing brings together specialist offensive (red team) security skills and threat intelligence to enable businesses to proactively test and identify any weaknesses, deficiencies or gaps in their controls and counteractive measures that could be exploited by threat actors. In this article, we set out what threat-led pen testing is, how it relates to the Digital Operational Resilience Act (DORA) and the testing requirements included as part of the new EU regulation.
Read Post
tripwire

Making Sense of Australia's New Cybersecurity Legislation

Feb 24, 2025 By Anirudh Chand In Tripwire
Late last year, Australia’s Cyber Security Act 2024 received Royal Assent and became Law. It was a huge moment for cybersecurity legislation in Australia, serving as the country’s first-ever standalone cybersecurity law, addressing key legislative gaps, and bringing the country in line with international best practices. But what’s included in the Act? And what does it mean for businesses? Keep reading to find out.
Read Post
wallarm

DORA: Strengthening Digital Resilience Through API Security

Feb 20, 2025 By Wallarm In Wallarm
The Digital Operational Resilience Act (DORA) is one of the most significant cybersecurity regulations for financial institutions in the European Union (EU). Failure to comply can have massive consequences, including financial penalties and forced operational downtime, meaning achieving DORA compliance should be a priority for all EU financial institutions. Implementing a comprehensive API security strategy goes a long way toward ensuring compliance with DORA requirements.
Read Post
tripwire

Malaysia's Data Sharing Bill 2024: Pioneering Secure and Efficient Government Collaboration

Feb 19, 2025 By Kirsten Doyle In Tripwire
In December 2024, Malaysia passed its Data Sharing Bill 2024, a new piece of legislation aimed at streamlining data-sharing across federal government agencies. This bill promises to revolutionize how data is managed, shared, and secured within Malaysia's government, fueling a more efficient, innovative, and secure public sector.
Read Post
kroll

NIS2: A Roadmap to Compliance

Feb 18, 2025 By Kroll In Kroll
The deadline for European Union member states to pass the new EU NIS2 regulation into national law was October 17, 2024, yet only a few countries have transposed it into law, leaving others lagging behind, with regulations in draft or public consultation phases, or not at all. In the absence of certainty for firms (or what NIS2 calls entities), confusion is understandable, but steps can be currently taken considering what we already know.
Read Post
vanta

Who needs to comply with DORA? All your questions answered

Feb 18, 2025 By Vanta In Vanta
The Digital Operational Resilience Act (DORA) has been developed to protect the financial sector, which is particularly vulnerable to cyberattacks. According to the IMF’s 2024 Global Financial Stability Report, the number of cyberattacks has progressively increased since 2004, and nearly 20% of these attempts target financial institutions. DORA serves as a regulatory measure in the European Union (EU) to improve cybersecurity and operational resilience of organizations in the financial sector.
Read Post
vanta

How does DORA impact UK entities: Key implications to consider

Feb 17, 2025 By Vanta In Vanta
The Digital Operations Resilience Act (DORA) is a new regulation aimed at improving the cybersecurity and operational stability of the EU's financial sector, especially regarding risks related to information and communications technology (ICT). It applies to organizations in the financial industry, requiring them to reassess and adapt their security posture to DORA’s stringent requirements.
Read Post
vanta

The 5 pillars of DORA: A detailed breakdown

Feb 13, 2025 By Vanta In Vanta
The Digital Operational Resilience Act (DORA) is a mandatory EU regulation that aims to unify various information and communications technology (ICT) risk management frameworks into one comprehensive set of guidelines and requirements. ‍ The regulation is built around five pillars that strengthen and facilitate the digital and operational resilience of entities in the finance and insurance sectors.
Read Post
gitprotect

DORA for DevOps and Jira Admins: How to Prepare Your Business for the Digital Operational Resilience Act

Feb 12, 2025 By Miłosz Jesis In GitProtect
Given the reality of today’s cybersecurity, it is of utmost importance to have frameworks and regulations. These help both the customers and the organizations to stay protected against the cyber threats that are around us. On 17th January 2025, the Digital Operational Resilience Act (DORA), formally known as Regulation (EU) 2022/2554, came into full effect.
Read Post
vanta

An actionable DORA compliance checklist for financial entities

Feb 12, 2025 By Vanta In Vanta
As of January 17, 2025, all financial entities and their information and communication technology (ICT) service providers catering to EU entities must comply with the Digital Operational Resilience Act (DORA). ‍ If you’re new to the regulation, you can reduce the potential overwhelm caused by its various requirements by using a concise compliance checklist. To help, we’ve created a robust guide that covers everything you should know, including: ‍
Read Post
vanta

What is the Digital Operational Resilience Act (DORA)? Everything you need to know

Feb 11, 2025 By Vanta In Vanta
The Digital Operational Resilience Act (DORA) is a comprehensive EU regulation aimed at financial entities and their third-party information and communications technology (ICT) providers. ‍ As a new and largely unexplored regulation, many affected organizations are still in the process of aligning their cybersecurity and risk management processes with the framework.
Read Post
kroll

A Phased Approach: Thoughts on EU AI Act Readiness

Feb 11, 2025 By Kroll In Kroll
The European Union’s (EU) AI Act (the Act) represents landmark artificial intelligence (AI) regulation from the EU designed to promote trustworthy AI by focusing on the impacts on people through required mitigation of potential risks to health, safety and fundamental rights. The Act introduces a comprehensive and often complex framework for the development, deployment and use of AI systems, impacting a wide range of businesses across the globe.
Read Post

DORA vs GDPR: Aligning Compliance in a Data-Driven World

Feb 10, 2025 By VISTA InfoSec In VISTA InfoSec
The Digital Operational Resilience Act (DORA) and the General Data Protection Regulation (GDPR) are two crucial compliance frameworks shaping the regulatory landscape. While GDPR focuses on data protection and privacy, DORA aims to strengthen the cybersecurity resilience of financial institutions. In this video, we break down: Key differences between DORA and GDPR How financial institutions can align with both frameworks Impact of non-compliance on DORA and GDPR Common Goals and Requirements of DORA and GDPR.
View Video
memcyco

The Only DORA Compliance Checklist You Need

Feb 7, 2025 By Julian Agudelo In Memcyco
The bad news – if you’re wondering about the DORA compliance date, it already passed on January 17th 2025. The good news? If you’ve been too busy to even think about the EU’s Digital Operational Resilience Act, it’s not too late to score some quick compliance wins. This DORA compliance checklist is your blueprint for establishing not just compliance, but checks and balances for maintaining it.
Read Post
memcyco

DORA Compliance Readiness Assesment [with Download]

Feb 7, 2025 By Julian Agudelo In Memcyco
If you’re just discovering the DORA and haven’t yet launched your compliance incentives, start with Memcyco’s DORA compliance guide that’s better suited for those just starting the journey. If you’ve already launched your DORA compliance incentives, this DORA readiness assesment will provide detailed benchmarks to ensure you’re on the right track.
Read Post
Featured Post
protegrity

DORA Is Here - But Readiness Concerns Are Far from Over

Feb 6, 2025 By Alasdair Anderson, VP of EMEA In Protegrity
For months, the impending Digital Operational Resilience Act (DORA) deadline has dominated boardroom discussions across the financial sector with its potential to reshape operational and regulatory practices. Now that DORA is officially in effect, attention has shifted to other matters, such as a new US presidential inauguration, AI, and fiscal concerns for 2025. Yet DORA should remain a major cause for concern as the regulation is now active and enforcement has begun. Given its likely strict enforcement, financial organisations and third parties must maintain focus on compliance to avoid major regulatory and operational risks.
Read Post
Trustwave

Will the UK's Ransomware Proposal Work? Trustwave Weighs in on the Potential Impact

Feb 6, 2025 By Trustwave In Trustwave
The recent UK Home Office proposal designed to hinder and disrupt ransomware operations through several proposed measures, including a targeted ban on ransomware payments, has again brought this question into the public square. The question of whether to pay a ransom demand is a decades-long argument with ardent opinions on both sides.
Read Post
veracode

From Regulation to Reality: DORA Compliance and What It Means for Your Software Security

Feb 4, 2025 By Michael Hughes In Veracode
The Digital Operational Resilience Act (DORA) is a landmark regulation designed to enhance the digital resilience of financial institutions in the EU. Effective from January 17, 2025, DORA mandates the development and maintenance of a robust ICT risk management framework. Here’s an overview of the five pillars and how the right software security measures can help you comply.
Read Post
kovrr

Materially Missing the Mark With Cyber Event Disclosure Rules

Feb 3, 2025 By Kovrr In Kovrr
A little over a year ago, the US SEC’s rules on cybersecurity incident disclosures were enacted, mandating that all publicly traded companies report material cyber events within four days after they had been determined as such unless exempted for national security or safety reasons. The rationale behind these rulings was that they would provide investors and relevant stakeholders with the information necessary to make more informed decisions, thereby leading to more realistically priced options.
Read Post
tripwire

How the Proposed HISAA Law Could Reshape Cybersecurity Compliance

Feb 3, 2025 By Josh Breaker-Rolfe In Tripwire
It’s been a tough year for the healthcare sector. Throughout 2024, cybercriminals have unleashed a barrage of attacks on a vast number of healthcare organizations - with disconcerting levels of success. FBI research revealed that healthcare is now the US’s most targeted industry.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.