PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

DORA: What You Need to Know

hackerone.com | blog | #supply-chain | #compliance | #risk-management | #dora | #supply-chain-security | #eu-regulation | #financial-sector
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The EU's DORA regulation applies from January 2025, requiring financial entities and ICT providers to implement ICT risk management, incident handling, and supply chain security programs.
Published
Collected

Related coverage

blog · bishopfox.com
Navigating DORA Compliance: A Comprehensive Approach to Threat-Led Penetration Testing
As DORA's January 2025 deadline nears, Bishop Fox outlines threat-led penetration testing under EU rules — who must test, how often (every three years) and how to prepare so TLPT builds resilience.
blog · bishopfox.com
Offensive Security Under the EU Digital Operational Resilience Act (DORA)
A legal view of DORA: financial entities and ICT vendors must adopt offensive security measures — penetration testing and threat-led exercises — enforced by authorities from January 2025.
blog · yeswehack.com
DORA now in force: 5 ways YesWeHack’s offensive security platform can bolster your Digital Operational Resilience Act compliance
With DORA now in force for EU financial entities, the article outlines five ways YesWeHack's platform (Bug Bounty, VDP, pentest management, ASM) supports compliance and cyber resilience.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
blog · certik.com
What Is a Crypto-Asset Service Provider (CASP)?
A crypto-asset service provider (CASP) is any business providing regulated crypto-asset services under the EU's MiCA framework. This guide covers qualifying activities and compliance obligations.
blog · jfrog.com
Navigating DORA Compliance: Software Development Requirements for Financial Services Companies
JFrog's DORA guide: as enforcement intensifies through 2026, EU financial firms and their ICT vendors must evidence resilient development—dependency governance, traceability and incident readiness.
Back