Dive into DORA and NIS-2 

DORA and NIS-2 will raise accountability measures for businesses across Europe. Find out what these directives mean for your organization. 

The EU Digital Operational Resilience Act (DORA) and the NIS-2 Directive are set to reshape how the financial sector approaches digital security and operational resilience.  

NIS-2, effective by September 2024, extends its scope across sectors and introduces: 

  • Enhanced risk management measures proportional to organizational risks 
  • Stricter incident reporting requirements with tighter deadlines 
  • Focus on securing the entire supply chain from third-party vulnerabilities 
  • Harmonized penalties across the EU, with fines up to 2% of global turnover 

As of January 2025, DORA will require financial institutions to: 

  • Implement robust ICT risk management frameworks 
  • Report ICT-related incidents promptly to regulators 
  • Conduct regular operational resilience testing, including scenario-based tests 
  • Closely monitor and manage risks from third-party ICT service providers, including cloud services 

Learn how Swisscom Trust Services can streamline your compliance efforts while showcasing business potential through real-world use cases.  

Download now to ensure your business is ready!