Who it applies to
- EU financial entities and regulated fintech companies.
- ICT vendors that support financial entities.
- B2B software suppliers facing DORA due diligence from financial-sector customers.
What you need to do
- ICT risk management, incident reporting, resilience testing, vendor oversight, and continuity planning.
- Clear records of critical ICT dependencies and risk treatment decisions.
- Evidence that controls and recovery processes are tested and maintained.
How to use this entry
- Use this page to understand the buyer or regulatory pressure before it becomes a deadline.
- Run the regulation checker to see whether this area is likely to matter for your company now.
- If it becomes relevant, Kaamos can help you scope the gap and turn it into prioritized security work.