Skip to Primary Navigation

Skip to main content

Preparing for DORA: Mind the gap

Mind the gap sign and boarding guide on the platform in a Metro station.
Photo: John HIcks/Getty Images

Mike Pierides | Morgan Lewis, Oliver Bell | Morgan Lewis, James Mulligan | Morgan Lewis+1

4 min read
 Click to share on Facebook (Opens in new window/tab) Click to share on Twitter (Opens in new window/tab) Click to share on LinkedIn (Opens in new window/tab) Click to share on WhatsApp (Opens in new window/tab)

How mandatory contract provisions under DORA map to existing regulatory regimes in respect of outsourcing arrangements and highlighting some of the gaps.

Starting January 17, 2025, financial entities based in the European Union must have in place processes and policies, as well as mandatory contract provisions with their third-party technology vendors, that comply with the EU’s Digital Operational Resilience Act (DORA).

Financial entities are currently at varying stages of updating their operational risk

, , , ,