DORA regulation drives new resilience roles in EU finance

The Digital Operational Resilience Act (DORA) entered into force in the European Union on January 17, 2025, impacting over 22,000 financial entities, including banks, insurers, and crypto service providers. The regulation mandates five core obligations: ICT risk management, resilience testing, incident reporting, third-party provider management, and cyber threat information sharing.

As the regulation moves into its second year, the focus is shifting from administrative setup to practical implementation and effectiveness. This transition has led to the emergence of new organizational roles, such as Chief Resilience Officers, tasked with coordinating previously siloed functions like cybersecurity, IT continuity, and risk management.

Regulators are increasingly scrutinizing ICT incident analysis and the ability of Security Operations Centers (SOCs) to maintain continuous visibility. Under Article 9, financial entities must monitor their ICT ecosystems to detect and minimize risks, a requirement that demands comprehensive visibility across legacy infrastructure and unmanaged devices to identify deviations from normal operational patterns.