🎧 In this third part, learn about DORA’s requirements for risk management.
Listen now:
In the third episode of our podcast series ‘Alles Legal – Fintech-Recht kompakt’, Josefine Spengler, lawyer at Annerton, talks to host Dana Wondra from Payment & Banking about a key innovation in financial supervisory law: What does DORA require in terms of ICT risk management – and why is digital resilience now a top priority?
🔍 What you’ll learn
A paradigm shift in risk management
Moving away from pure IT security towards integrated, proactive risk management. Risks need to be identified, assessed, managed and documented at an early stage. The crisis resilience of a company is also coming into focus.
ICT risks as a management task
DORA makes management the central authority in the area of digital resilience. It is responsible for strategy, resources, processes and communication – including regular training in IT risks.
Pragmatic implementation in the company
Josefine Spengler shows how DORA requirements can be implemented with structure and a sense of proportion: through clear responsibilities, uniform templates and, where necessary, targeted outsourcing. Even smaller institutions can find practical ways to effectively meet the requirements.
👤 To whom is this episode relevant?
- Managing directors and board members of regulated institutions
- Compliance and risk managers
- IT security officers and internal control functions
- In-house lawyers and specialists in financial companies
Stay tuned, next week the podcast will look at ICT incidents and reporting and answer the question: What to do in an emergency?
Adjust processes, review systems, document evidence: DORA’s requirements are diverse, and implementation calls for clarity and structure.
The Annerton DORA Monitor supports you on your journey to digital resilience: We summarise developments and practical tips for you in a concise format.
📥 Download the first edition free of charge now. – And sign up for our mailing list to be automatically notified by email whenever a new edition is released – ensuring you are reliably guided through the DORA jungle.
About this podcast
Alles Legal – Fintech Recht Kompakt delivers sharp, weekly insights into legal and compliance matters in the world of banking. (in German only)
This podcast is a collaboration between Payment & Banking and PayTechLaw.
Each Wednesday, we unpack the legal developments shaping the financial world – clearly, concisely, and without the legal jargon.
Since 2021, PayTechLaw authors and Annerton attorneys have brought depth and clarity to complex topics.
Whether it’s PSD3, DORA, or FiDA – we provide the legal context you need.
In 20 minutes. No detours.
