---
id: 3907
title: "Offensive Security Under the EU Digital Operational Resilience Act (DORA)"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/offensive-security-eu-dora"
published_at: "2024-08-28 00:00"
tags: ["compliance", "penetration-testing", "financial-services", "dora", "ict-risk", "eu-regulation"]
phying_url: "https://phying.com/item/3907"
lang: en
---

# Offensive Security Under the EU Digital Operational Resilience Act (DORA)

## Summary

A legal view of DORA: financial entities and ICT vendors must adopt offensive security measures — penetration testing and threat-led exercises — enforced by authorities from January 2025.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2024-08-28 00:00
- **Original:** https://bishopfox.com/blog/offensive-security-eu-dora
- **Phying News:** https://phying.com/item/3907