Our Clients

The Digital Operational Resilience Act, or DORA, is a new European regulation that aims to improve the security and resilience of the digital capabilities of financial entities and information and communications technology (ICT) service providers in the EU. It came into force on 16 January 2023 and organisations affected by it have until January 2025 to meet its requirements.
DORA applies to more than 22,000 financial entities and ICT service providers operating within the EU, as well as the ICT infrastructure supporting them from outside the EU.
DORA covers topics such as ICT risk management, reporting on ICT-related incidents, digital operational resilience testing, management of third-party risk, and information and intelligence sharing.
Sign up now to receive our DORA Digest that covers these topics and keeps you up to date as the countdown to compliance begins in earnest.
Subscribe to our newsletter
Insights

Media Monitoring as an ODD Signal: What to Watch For
Reputational signals move faster than annual reviews. Here's what real-time media monitoring should catch in operational due diligence, and why.

From Red Flag to Redline: How Cyber Findings Actually Change Deal Terms
A cyber finding rarely kills a deal, it can and does, however what it does far more often, is move it: from a line in a due diligence report to a redline in the SPA.

Financial Statement Red Flags: An Operational Due Diligence Perspective
Audited financial statements are one of the richest, most under-used sources of insight into a manager's financial health. Here's what actually predicts stress, and how financial analysis fits within a broader operational due diligence framework.

Why Summer is a Blind Spot in Private Equity Risk Oversight
Threat levels don't take annual leave. Why PE firms need continuous cyber oversight of portfolio companies, not seasonal assessment.
