DORA Compliance with Human Risk Management
The Digital Operational Resilience Act requires ICT risk management including the human factor. Nexus-7 makes this measurable.
What is DORA?
The Digital Operational Resilience Act (DORA) is EU legislation requiring digital operational resilience from financial entities. DORA applies from 17 January 2025.
ICT Risk Management
Framework for identification and management of ICT risks.
Incident Reporting
Mandatory reporting of ICT-related incidents.
Resilience Testing
Regular testing of digital resilience.
Third Party Risk
Management of ICT risks from suppliers.
Information Sharing
Sharing of threat intelligence.
Who Must Comply with DORA?
DORA applies to virtually all financial entities in the EU, including:
DORA Timeline
The Human Factor in DORA
DORA recognizes that digital resilience is not just about technology, but also people. Article 13 specifies requirements for awareness and training.
Human Errors
Of cybersecurity incidents in financial sector involve human errors.
Average Cost
Cost of a data breach in the financial sector (IBM 2024).
Reporting Deadline
Time to report serious ICT incidents to regulators.
DORA Compliance with Nexus-7
Our platform helps financial institutions meet the human factor requirements of DORA.
ICT Risk Assessment
Measure human ICT risks like phishing susceptibility, social engineering vulnerability and policy compliance.
Training Effectiveness
Document and measure the effectiveness of your awareness programs as required by DORA Article 13.
Awareness Programs
Develop targeted training based on identified risks and vulnerabilities.
Compliance Reporting
Generate reports for regulators demonstrating your DORA compliance.
Relevant DORA Articles
Nexus-7 specifically supports these DORA requirements:
ICT Risk Management Framework
Requires a framework for ICT risk management including human factors.
Awareness and Training
Specific requirements for security awareness programs and training.
Communication
Internal communication about ICT risks and policies.
Resilience Testing
Regular testing of digital operational resilience.
Advanced Testing
Threat-led penetration testing for significant entities.
Third Party Risk
Management of ICT risks from critical third parties.
Prepare for DORA Compliance
The January 2025 deadline is approaching fast. Start measuring and improving your human resilience now.