{"id":217,"date":"2024-08-04T06:52:42","date_gmt":"2024-08-04T06:52:42","guid":{"rendered":"http:\/\/deka"},"modified":"2025-11-15T08:15:16","modified_gmt":"2025-11-15T08:15:16","slug":"dora-umsetzungshinweise","status":"publish","type":"post","link":"https:\/\/reguvance.com\/en\/dora-umsetzungshinweise\/","title":{"rendered":"DORA: BaFin publishes implementation instructions"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Mit dem Digital Operational Resilience Act (DORA) steht der Finanzbranche eine bedeutende regulatorische Ver\u00e4nderung bevor. Als Ihr verl\u00e4sslicher Partner f\u00fcr IT-Regulatorik und Projektmanagement m\u00f6chte ReguVance Sie \u00fcber die j\u00fcngsten Entwicklungen informieren und Ihnen bei der erfolgreichen Umsetzung zur Seite stehen.<\/p>\n

Time frame and objectives<\/p>\n

DORA came into force on 16 January 2023 and will be mandatory from 17 January 2025. The aim is to strengthen digital operational resilience in the financial sector through a standardised set of rules for ICT risks and cybersecurity.<\/p>\n

BaFin's implementation guidance: An overview<\/p>\n

BaFin has developed detailed implementation guidelines in cooperation with Deutsche Bundesbank and industry representatives. These address the following key areas:<\/p>\n

    \n
  1. \n

    Governance and organisation<\/p>\n<\/li>\n

  2. \n

    Information risk and information security management<\/p>\n<\/li>\n

  3. \n

    IT operations<\/p>\n<\/li>\n

  4. \n

    ICT business continuation management<\/p>\n<\/li>\n

  5. \n

    IT project management and application development<\/p>\n<\/li>\n

  6. \n

    ICT third party risk management<\/p>\n<\/li>\n

  7. \n

    Operational information security<\/p>\n<\/li>\n

  8. \n

    Identity and rights management<\/p>\n<\/li>\n<\/ol>\n

    Key innovations and challenges<\/p>\n

    IKT Business Continuation Guideline<\/p>\n

    One major innovation is the introduction of a specific guideline for ICT business continuity. This must contain detailed guidelines for responding to ICT incidents, containment measures and damage assessments.<\/p>\n

    Extended emergency management<\/p>\n

    Financial organisations need to expand their contingency management to include new scenarios, including climate change impacts, insider attacks, political and social instability and large-scale power outages.<\/p>\n

    Operational stability and system updates<\/p>\n

    DORA requires continuous updating of ICT systems and their stability even during periods of stress - a requirement that goes beyond previous regulations.<\/p>\n

    ICT services and third-party providers<\/p>\n

    The definition of ICT services has been expanded, which requires a more comprehensive assessment of all ICT-related third-party relationships.<\/p>\n

    ICT risk control function<\/p>\n

    DORA is introducing a new function responsible for the management and monitoring of ICT risks. This goes beyond the role of the previous Information Security Officer (ISO).<\/p>\n

    ReguVance: Ihr Partner f\u00fcr die DORA-Implementierung<\/p>\n

    Die Umsetzung von DORA stellt viele Finanzunternehmen vor komplexe Herausforderungen. Als erfahrener Spezialist f\u00fcr IT-Regulatorik und Projektmanagement im Finanzsektor bietet ReguVance Ihnen ma\u00dfgeschneiderte Unterst\u00fctzung:<\/p>\n

      \n
    1. \n

      Gap analysis<\/strong>We identify gaps between your existing processes and the DORA requirements.<\/p>\n<\/li>\n

    2. \n

      Realisation planning<\/strong>Together we develop a structured roadmap for DORA compliance.<\/p>\n<\/li>\n

    3. \n

      Implementation support<\/strong>Our experienced project managers support you in the efficient implementation of the necessary measures.<\/p>\n<\/li>\n

    4. \n

      Training courses<\/strong>We ensure that your employees are fit for the new requirements.<\/p>\n<\/li>\n

    5. \n

      Continuous counselling<\/strong>Even after implementation, we are at your side for questions and adjustments.<\/p>\n<\/li>\n<\/ol>\n

      Wichtig zu beachten ist, dass die bisherigen regulatorischen Anforderungen (xAIT) weiterhin eine wesentliche Grundlage f\u00fcr die DORA-Compliance bilden. ReguVance verf\u00fcgt \u00fcber umfassende Erfahrung in beiden Bereichen und kann Sie so optimal bei der Integration der neuen Anforderungen in Ihre bestehenden Strukturen unterst\u00fctzen.<\/p>\n

      Let us develop and implement your DORA strategy together. Contact us today for a non-binding consultation.<\/p>\n

      <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

      Mit dem Digital Operational Resilience Act (DORA) steht der Finanzbranche eine bedeutende regulatorische Ver\u00e4nderung bevor. Als Ihr verl\u00e4sslicher Partner f\u00fcr IT-Regulatorik und Projektmanagement m\u00f6chte ReguVance Sie \u00fcber die j\u00fcngsten Entwicklungen informieren und Ihnen bei der erfolgreichen Umsetzung zur Seite stehen. Zeitlicher Rahmen und Zielsetzung DORA trat am 16. Januar 2023 in Kraft und wird ab […]<\/p>","protected":false},"author":1,"featured_media":215,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-217","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-create-business"],"_links":{"self":[{"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/posts\/217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/comments?post=217"}],"version-history":[{"count":7,"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/posts\/217\/revisions"}],"predecessor-version":[{"id":752,"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/posts\/217\/revisions\/752"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/media\/215"}],"wp:attachment":[{"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/media?parent=217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/categories?post=217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/reguvance.com\/en\/wp-json\/wp\/v2\/tags?post=217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}