The Digital Operational Resilience Act (DORA) has applied to EU financial entities since January 2025. It expects firms to understand, test and evidence the resilience of the ICT systems their critical functions depend on, including the connectivity that links data centres, cloud providers, market infrastructure and customers.
Most financial firms buy that connectivity rather than building it, which makes it hard to see where the real risks are. Two “diverse” circuits sharing a duct. A DNS provider nobody has thought about. A BGP configuration that only one contractor understands.
How we help
- Independent connectivity and network review. We map your physical and logical paths, providers and dependencies, find the single points of failure, and tell you plainly what to fix first.
- Resilience testing. Planning and running failover tests and scenario-based tabletop exercises, and writing up the evidence.
- Third-party and concentration risk. Technical due diligence on network, transit and data centre providers to support your ICT third-party risk register.
- Design and procurement. Vendor-neutral design and tendering for resilient connectivity, DDoS protection and internet edge.
- Board reporting. Findings written for management bodies as well as engineers. Our directors are experienced in corporate governance, so we understand the audit committee’s point of view.
As experienced network engineers, we work alongside your risk, compliance and legal advisers.