Our Clients

The Digital Operational Resilience Act, or DORA, is a new European regulation that aims to improve the security and resilience of the digital capabilities of financial entities and information and communications technology (ICT) service providers in the EU. It came into force on 16 January 2023 and organisations affected by it have until January 2025 to meet its requirements.
DORA applies to more than 22,000 financial entities and ICT service providers operating within the EU, as well as the ICT infrastructure supporting them from outside the EU.
DORA covers topics such as ICT risk management, reporting on ICT-related incidents, digital operational resilience testing, management of third-party risk, and information and intelligence sharing.
Sign up now to receive our DORA Digest that covers these topics and keeps you up to date as the countdown to compliance begins in earnest.
Subscribe to our newsletter
Insights

Why Summer is a Blind Spot in Private Equity Risk Oversight
Threat levels don't take annual leave. Why PE firms need continuous cyber oversight of portfolio companies, not seasonal assessment.

Why Cyber Risk Belongs in Operational Due Diligence
Cyber risk is still treated as an IT checkbox in operational due diligence. Here's why it needs to be a continuous monitoring signal.

Thomas Murray Publishes "Beneath the Asset: Cyber Risk and the Infrastructure Institutions Depend On"
Cyber risk has become the primary mechanism through which infrastructure failures reach institutional assets

Private Equity Cyber Risk Checklist
The PE Cyber Risk Checklist is a ten-step diagnostic for PE fund leadership, covering every stage from pre-deal surveillance to exit readiness.
