It’s six months since Digital Operational Resilience Act (DORA) has been implemented yet it’s clear that gaps remain between what was expected and what is being actioned.
Far too many firms still see compliance as a tick box IT project rather than the cultural, governance and resilience change in the sector that the regulation was intended to bring about. It’s easy to think that existing systems of frameworks and risk processes are “close enough,” but that sense of complacency has left us holding on to a false sense of security.
