Expertise for your Compliance

NIS 2 in Practice: The Four Core Requirements

NIS 2: What the Law Requires – and Who Is Affected

Three Steps to Reporting ICT-Related Incidents under DORA

With the Digital Operational Resilience Act (DORA), the reporting of ICT-related incidents has become a binding regulatory obligation for financial entities.

Complexity in Outsourcing Management – When Categories Become a Burden

Why the Criticality of a Business Function is Not a "Yes/No Question"

DORA Explained: What Companies Must Implement

DORA requires financial institutions to systematically strengthen their digital operational resilience. This includes, among other things, ICT risk management, ICT incident reporting, and the management of ICT third-party risks.

DORA and ICT Third-Party Risk Management (TPRM)

DORA verpflichtet Finanzunternehmen zu einem strukturierten ICT Third-Party Risk Management – von Risikoanalyse über Verträge bis zur laufenden Überwachung externer IT-Dienstleister.