{"id":74368,"date":"2025-10-25T20:58:55","date_gmt":"2025-10-25T20:58:55","guid":{"rendered":"https:\/\/complior.se\/?page_id=74368"},"modified":"2026-01-20T04:13:26","modified_gmt":"2026-01-20T03:13:26","slug":"dora","status":"publish","type":"page","link":"https:\/\/complior.se\/en\/compliance\/dora\/","title":{"rendered":"DORA"},"content":{"rendered":"
<\/span>
\n
\n
\n
\n

DORA<\/h1>\n\n\n\n
\n

Digital Operational Resilience Act<\/strong><\/p>\n<\/div>\n\n\n\n

The financial sector within the EU faces increased demands on cyber security and business continuity. To meet these challenges, the European Union has introduced DORA. This regulatory framework aims to strengthen financial actors' ability to deal with cyber threats and ensure that their operations can continue to function even during digital disruptions. Starting on January 1, 2023, companies have until January 2025 to implement the measures to be fully compliant.<\/p>\n<\/div>\n\n\n\n

\n
Contact us<\/div><\/path><\/svg><\/span><\/a><\/div><\/div>\n<\/div><\/div>\n<\/div>\n\n\n\n
\n
\"\"<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\n
\n

What is DORA<\/h2>\n\n\n\n

DORA is a comprehensive framework that focuses on building digital resilience within the financial sector. By harmonizing and standardizing security requirements in information and communication technology (ICT), companies should be able to face and resist cyber attacks and other digital disruptions. A central goal of DORA is to ensure that companies not only react to threats, but also actively prevent and minimize the risks of disruption.<\/p>\n<\/div>\n\n\n\n

\n
\"\"<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n
\n

Technical requirements in DORA<\/h2>\n\n\n\n

One of the most prominent parts of DORA is the technical requirements placed on financial actors and their IT infrastructure. These requirements are intended to ensure a robust and secure digital environment that can handle today's increasingly sophisticated cyber threats.<\/p>\n<\/div>\n\n\n\n

\n
\n

Risk management<\/h3>\n\n\n\n

One of DORA's most important requirements is that all financial actors must have comprehensive systems to manage risks linked to their ICT infrastructure. Companies must identify critical functions and assets, ensure these are protected with appropriate security systems, and monitor to quickly detect anomalies or cyber threats. This includes both technical solutions such as intrusion detection systems and processes to continuously review and update protection against new threats.<\/p>\n<\/div>\n\n\n\n

\n

Incident management and reporting<\/h3>\n\n\n\n

DORA also introduces requirements for companies to effectively manage and report cyber incidents. Companies need to be able to classify each incident according to specific criteria set by the EU regulatory authorities (ESA) and deliver multiple reports \u2013 from initial to final. This reporting structure helps create transparency and coordination at EU level, and ensures that cyber incidents are dealt with in a consistent manner.<\/p>\n<\/div>\n\n\n\n

\n

Regular security tests<\/h3>\n\n\n\n

To ensure IT systems are resilient against cyber threats, DORA requires all financial firms to carry out regular testing of their systems. These include annual testing to identify vulnerabilities and, for some larger players, comprehensive penetration testing (TLPT) every three years. Through these tests, real attacks are simulated to ensure that the systems are resistant to attacks. Vulnerabilities discovered during testing must be addressed immediately.<\/p>\n<\/div>\n\n\n\n

\n

Third Party Providers<\/h3>\n\n\n\n

Another important part of DORAs is the management of ICT services from third-party providers. The regulations require companies to carefully review and monitor their external suppliers to ensure that they too maintain the same high security standards. This applies not only to cloud providers, who were previously a particular focus point, but to all providers of IT services. The agreements with these providers must include detailed information about service levels, data storage and security measures.<\/p>\n<\/div>\n\n\n\n

\n

Data Protection and Privacy<\/h3>\n\n\n\n

To meet the technical requirements of DORA, encryption plays a central role. Encryption is one of the most effective methods of protecting sensitive information, and DORA emphasizes the need to use strong encryption both for data at rest and in transit. By encrypting customer data, financial transactions and other critical information, companies can reduce the risk of data breaches and ensure that even if the data were to be accessed by unauthorized persons, it is unusable without the right encryption key.

In addition to encryption, companies under DORA must ensure the integrity and availability of data, whether internal information or customer data. Technical solutions are required to prevent data loss and ensure that only authorized personnel have access to critical systems. Here, the use of multi-factor authentication (MFA) and other security tools can help further strengthen protection.<\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n

\n
\n
\n

Impact on Financial Actors<\/h2>\n\n\n\n

DORA g\u00e4ller f\u00f6r ett brett spektrum av finansiella akt\u00f6rer, fr\u00e5n banker och f\u00f6rs\u00e4kringsbolag till kryptotj\u00e4nstleverant\u00f6rer och crowdfunding-plattformar. Tredjepartsleverant\u00f6rer, som erbjuder kritiska IKT-tj\u00e4nster, omfattas ocks\u00e5. F\u00f6r leverant\u00f6rer utanf\u00f6r EU inneb\u00e4r detta att de m\u00e5ste etablera dotterbolag inom unionen f\u00f6r att kunna forts\u00e4tta erbjuda tj\u00e4nster till EU-baserade f\u00f6retag. Genom att inkludera nya akt\u00f6rer, s\u00e5som kryptobaserade finansiella tj\u00e4nster och alternativa investeringsfonder, speglar DORA hur snabbt finansbranschen har digitaliserats. Regelverket g\u00f6r att alla akt\u00f6rer, stora som sm\u00e5, m\u00e5ste ta ett st\u00f6rre ansvar f\u00f6r cybers\u00e4kerheten.<\/p>\n<\/div>\n\n\n\n

\n

Continuity and Resilience<\/h2>\n\n\n\n

Ett av DORAs prim\u00e4ra m\u00e5l \u00e4r att s\u00e4kerst\u00e4lla att finansiella f\u00f6retag kan forts\u00e4tta sin verksamhet \u00e4ven vid cyberattacker eller st\u00f6rre IT-haverier. Detta st\u00e4ller h\u00f6ga krav p\u00e5 f\u00f6retagens f\u00f6rm\u00e5ga att bygga motst\u00e5ndskraftiga system, d\u00e4r tekniker som kryptering och avancerade s\u00e4kerhetsl\u00f6sningar spelar en avg\u00f6rande roll. I praktiken inneb\u00e4r detta att f\u00f6retag m\u00e5ste ha detaljerade krisplaner och l\u00f6sningar som till\u00e5ter dem att snabbt \u00e5terg\u00e5 till normal verksamhet efter en incident. Genom att st\u00e4lla h\u00f6ga krav p\u00e5 digital s\u00e4kerhet, incidenthantering och samarbete med tredjepartsleverant\u00f6rer, skapar DORA en robust grund f\u00f6r att finanssektorn ska kunna motst\u00e5 framtida cyberhot och s\u00e4kerst\u00e4lla stabilitet i en alltmer digital v\u00e4rld.
<\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

Vad \u00e4r DORA? DORA \u00e4r ett omfattande ramverk som fokuserar p\u00e5 att bygga upp den digitala resiliensen inom den finansiella sektorn. Genom att harmonisera och standardisera s\u00e4kerhetskraven inom informations- och kommunikationsteknik (IKT) ska f\u00f6retag kunna m\u00f6ta och motst\u00e5 cyberattacker och andra digitala st\u00f6rningar. Ett centralt m\u00e5l med DORA \u00e4r att s\u00e4kerst\u00e4lla att f\u00f6retag inte bara […]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":74361,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"blank","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":0,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","_eb_attr":"","inline_featured_image":false,"_uag_custom_page_level_css":"","wpm_timeformat":"","_wpm_styles":"","footnotes":""},"class_list":["post-74368","page","type-page","status-publish","hentry"],"yoast_head":"\nDORA - Complior<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/complior.se\/en\/compliance\/dora\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DORA - Complior\" \/>\n<meta property=\"og:description\" content=\"Vad \u00e4r DORA? DORA \u00e4r ett omfattande ramverk som fokuserar p\u00e5 att bygga upp den digitala resiliensen inom den finansiella sektorn. Genom att harmonisera och standardisera s\u00e4kerhetskraven inom informations- och kommunikationsteknik (IKT) ska f\u00f6retag kunna m\u00f6ta och motst\u00e5 cyberattacker och andra digitala st\u00f6rningar. Ett centralt m\u00e5l med DORA \u00e4r att s\u00e4kerst\u00e4lla att f\u00f6retag inte bara […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/complior.se\/en\/compliance\/dora\/\" \/>\n<meta property=\"og:site_name\" content=\"Complior\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-20T03:13:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/DORAImage.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1580\" \/>\n\t<meta property=\"og:image:height\" content=\"970\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/dora\\\/\",\"url\":\"https:\\\/\\\/complior.se\\\/compliance\\\/dora\\\/\",\"name\":\"DORA - Complior\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/dora\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/dora\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/DORAImage.webp\",\"datePublished\":\"2025-10-25T20:58:55+00:00\",\"dateModified\":\"2026-01-20T03:13:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/dora\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/complior.se\\\/compliance\\\/dora\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/dora\\\/#primaryimage\",\"url\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/DORAImage.webp\",\"contentUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/DORAImage.webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/complior.se\\\/compliance\\\/dora\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/complior.se\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Compliance\",\"item\":\"https:\\\/\\\/complior.se\\\/compliance\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"DORA\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/complior.se\\\/#website\",\"url\":\"https:\\\/\\\/complior.se\\\/\",\"name\":\"Complior\",\"description\":\"Security beyond compliance\",\"publisher\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/complior.se\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\",\"name\":\"Complior\",\"url\":\"https:\\\/\\\/complior.se\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Complior_logo_dark-scaled.png\",\"contentUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Complior_logo_dark-scaled.png\",\"width\":2560,\"height\":960,\"caption\":\"Complior\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DORA - Complior","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/complior.se\/en\/compliance\/dora\/","og_locale":"en_GB","og_type":"article","og_title":"DORA - Complior","og_description":"Vad \u00e4r DORA? DORA \u00e4r ett omfattande ramverk som fokuserar p\u00e5 att bygga upp den digitala resiliensen inom den finansiella sektorn. Genom att harmonisera och standardisera s\u00e4kerhetskraven inom informations- och kommunikationsteknik (IKT) ska f\u00f6retag kunna m\u00f6ta och motst\u00e5 cyberattacker och andra digitala st\u00f6rningar. Ett centralt m\u00e5l med DORA \u00e4r att s\u00e4kerst\u00e4lla att f\u00f6retag inte bara […]","og_url":"https:\/\/complior.se\/en\/compliance\/dora\/","og_site_name":"Complior","article_modified_time":"2026-01-20T03:13:26+00:00","og_image":[{"width":1580,"height":970,"url":"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/DORAImage.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/complior.se\/compliance\/dora\/","url":"https:\/\/complior.se\/compliance\/dora\/","name":"DORA - Complior","isPartOf":{"@id":"https:\/\/complior.se\/#website"},"primaryImageOfPage":{"@id":"https:\/\/complior.se\/compliance\/dora\/#primaryimage"},"image":{"@id":"https:\/\/complior.se\/compliance\/dora\/#primaryimage"},"thumbnailUrl":"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/DORAImage.webp","datePublished":"2025-10-25T20:58:55+00:00","dateModified":"2026-01-20T03:13:26+00:00","breadcrumb":{"@id":"https:\/\/complior.se\/compliance\/dora\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/complior.se\/compliance\/dora\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/complior.se\/compliance\/dora\/#primaryimage","url":"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/DORAImage.webp","contentUrl":"https:\/\/complior.se\/wp-content\/uploads\/2025\/11\/DORAImage.webp"},{"@type":"BreadcrumbList","@id":"https:\/\/complior.se\/compliance\/dora\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/complior.se\/"},{"@type":"ListItem","position":2,"name":"Compliance","item":"https:\/\/complior.se\/compliance\/"},{"@type":"ListItem","position":3,"name":"DORA"}]},{"@type":"WebSite","@id":"https:\/\/complior.se\/#website","url":"https:\/\/complior.se\/","name":"Complior","description":"Security beyond compliance","publisher":{"@id":"https:\/\/complior.se\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/complior.se\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/complior.se\/#organization","name":"Complior","url":"https:\/\/complior.se\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/complior.se\/#\/schema\/logo\/image\/","url":"https:\/\/complior.se\/wp-content\/uploads\/2025\/06\/Complior_logo_dark-scaled.png","contentUrl":"https:\/\/complior.se\/wp-content\/uploads\/2025\/06\/Complior_logo_dark-scaled.png","width":2560,"height":960,"caption":"Complior"},"image":{"@id":"https:\/\/complior.se\/#\/schema\/logo\/image\/"}}]}},"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"trp-custom-language-flag":false},"uagb_author_info":{"display_name":"Johan Challita","author_link":"https:\/\/complior.se\/en\/author\/johan-challita\/"},"uagb_comment_info":0,"uagb_excerpt":"Vad \u00e4r DORA? DORA \u00e4r ett omfattande ramverk som fokuserar p\u00e5 att bygga upp den digitala resiliensen inom den finansiella sektorn. Genom att harmonisera och standardisera s\u00e4kerhetskraven inom informations- och kommunikationsteknik (IKT) ska f\u00f6retag kunna m\u00f6ta och motst\u00e5 cyberattacker och andra digitala st\u00f6rningar. Ett centralt m\u00e5l med DORA \u00e4r att s\u00e4kerst\u00e4lla att f\u00f6retag inte bara…","_links":{"self":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages\/74368","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/comments?post=74368"}],"version-history":[{"count":146,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages\/74368\/revisions"}],"predecessor-version":[{"id":79268,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages\/74368\/revisions\/79268"}],"up":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/pages\/74361"}],"wp:attachment":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/media?parent=74368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}