Our Clients

The Digital Operational Resilience Act, or DORA, is a new European regulation that aims to improve the security and resilience of the digital capabilities of financial entities and information and communications technology (ICT) service providers in the EU. It came into force on 16 January 2023 and organisations affected by it have until January 2025 to meet its requirements.
DORA applies to more than 22,000 financial entities and ICT service providers operating within the EU, as well as the ICT infrastructure supporting them from outside the EU.
DORA covers topics such as ICT risk management, reporting on ICT-related incidents, digital operational resilience testing, management of third-party risk, and information and intelligence sharing.
Sign up now to receive our DORA Digest that covers these topics and keeps you up to date as the countdown to compliance begins in earnest.
Subscribe to our newsletter
Insights

The Hidden Costs of Spreadsheet-Based Due Diligence
For decades, spreadsheets have been the default tool for operational due diligence. But the costs of this approach are becoming impossible to ignore.

Thomas Murray Launches “Beneath the Asset” Initiative
New analysis warns the classic understanding of asset safety is being fundamentally reshaped.

Missing Security Provisions: 10 Key Questions every Private Equity firm should ask their MSP
Most private equity firms assume their MSP is handling cyber security. Most are wrong.

Top 5 Things Investors and Allocators Should Look for in Technologies Streamlining Operational Due Diligence
Our work at the intersection of institutional risk and market infrastructure has shown us what makes ODD technology truly impactful.
