CMDB & DORA Legislation

 What is the Digital Operational Resilience Act (DORA)? 

The Digital Operational Resilience Act (Regulation (EU) 2022/2554) solves an important problem in the EU financial regulation. Before DORA, financial institutions managed the main categories of operational risk mainly with the allocation of capital, but they did not manage all components of operational resilience. After DORA, they must also follow rules for the protection, detection, containment, recovery and repair capabilities against ICT-related incidents. DORA explicitly refers to:

• ICT risk and sets rules on ICT risk-management
• Incident reporting
• Operational resilience testing 
• ICT third-party risk monitoring
• Information Sharing

This Regulation acknowledges that ICT incidents and a lack of operational resilience have the possibility to jeopardise the soundness of the entire financial system, even if there is "adequate" capital for the traditional risk categories. 

We can help get your CI information right by automating your CMDB discovery through DEVICE42.  

We map all your application dependencies to provide you real-time information on all your key IT Infrastructure assets  

What we do!

• Analyse as-is IT Infrastructure asset landscape
• Provide a detailed technical solution on CMDB discovery
• Map application dependencies 
• CMDB maturity assessment
• Provide an implementation and rollout roadmap
• Develop bespoke infrastructure reports to support compliance