What does DORA stand for?
DORA stands for the Digital Operational Resilience Act.It is a European Union (EU) regulation designed to ensure the financial sector can withstand, respond to, and recover from severe information and communication technology (ICT) disruptions and cyberattacks.
What does DORA cover?
DORA is built on five main areas:
- ICT risk management: Firms must create strategies to spot, assess, and stop technology risks.
- Incident reporting: Companies must quickly report major IT problems and cyberattacks to authorities.
- Resilience testing: Organizations must regularly test their computer systems by simulating attacks.
- Third-party risk management: Financial firms must carefully manage the risks of outside tech vendors.
- Information sharing: Businesses are encouraged to share cyber threat information with each other to improve overall safety.
Related content
Is Atlassian Isolated Cloud GDPR-compliant?
Yes, Atlassian Isolated Cloud is GDPR-compliant, building on Atlassian's established GDPR framework for its cloud offerings. It enhances compliance through single-tenant isolation and customer-selected regions in the EU or elsewhere, minimizing data transfer risks.
What is the difference between GDPR and Cloud Act?
GDPR is an EU-wide privacy statute that limits what organisations may do with individuals’ personal data and how that data can be transferred outside the bloc.
The CLOUD Act is a U.S. criminal-procedure law that expands when U.S. authorities may compel cloud providers to hand over data—even if the bits sit in Europe.
One protects data subjects; the other empowers investigators. Because both reach across borders, they can collide, forcing companies to balance EU obligations to withhold data against U.S. orders to disclose it.
GDPR and the CLOUD Act pursue opposite goals—one to shield personal data, the other to expose it for legitimate policing—yet both claim global reach. Companies operating trans-Atlantically must design governance that can survive being pulled in both directions at once.
