DORA is now law across the EU financial sector. Tom explains the five pillars, who is accountable for what (the board carries it under Article 5), and how an ISO 27001 management system gets you most of the way. He then covers where organisations trip up, which is incident classification and reporting, the register of information, Article 30 contract clauses, exit strategies, resilience testing and the scope of your certificate.

Read More