Eastnets Achieves Compliance with EU’s Digital Operational Resilience Act
Eastnets, a global leader in compliance and payments solutions, has announced that it has fully satisfied the requirements of the EU Digital Operational Resilience Act (DORA). This significant achievement positions Eastnets ahead of the regulation's enforcement, ensuring operational readiness and resilience.
The Importance of DORA in Financial Services
DORA mandates rigorous standards to bolster cybersecurity and operational resilience within the financial services sector. It is designed to influence both financial institutions and their critical technology partners. The regulation's stringent measures encompass comprehensive risk assessments, continuous operational capabilities, and thorough oversight of third-party providers.
Commitment to a Secure Digital Future
Bruno Caille, the Data Protection Officer and Acting Compliance Manager at Eastnets, emphasized the significance of this compliance, stating, "We understand the importance of securing the digital supply chain. Satisfying the DORA requirements ahead of time reflects our commitment to maintaining our customers' operations resilient and reliable, while fostering trust in an ever-evolving financial landscape."
Steps Taken for Compliance
To meet DORA's multiple requirements, Eastnets has implemented a thorough process:
Thorough Screening of Third-Party Providers
The company has screened all critical third-party providers (TPPs) with a DORA-centric questionnaire to evaluate risk scores and compliance readiness.
Risk Scoring and Management
Risk scores were assigned based on the responses provided by third parties, categorized into five levels ranging from “Very Low” to “Very High.” For high-risk providers, Eastnets devised comprehensive mitigation plans or sought substitutions to reduce exposure and protect operations.
Intensive Testing for Security Assurance
Eastnets has conducted extensive penetration testing and internal evaluations to ensure that their systems align with compliance protocols across its global operations.
This proactive approach demonstrates Eastnets’ dedication to being a trusted ally within the financial ecosystem, solidifying its reputation across Europe and beyond. By meeting DORA standards, customers can have confidence in partnering with a provider that prioritizes high levels of digital resilience.
Caille emphasized, "At Eastnets, we’re dedicated to helping our customers stay ahead of regulatory demands with solutions that prioritize simplicity, security, and innovation." He highlighted that DORA establishes new benchmarks for third-party risk management and ICT oversight, allowing Eastnets’ certified SWIFT Service Bureaus located in various regions to offer a secure, cloud-native platform that eases operational burdens while ensuring compliance and adaptability to changing regulations.
As the deadline for DORA compliance approaches, Eastnets is set on maintaining its leadership and demonstrating its commitment to its partners. The focus remains on fostering a secure and resilient future as digital financial operations continue to evolve.
Frequently Asked Questions
What is the EU Digital Operational Resilience Act (DORA)?
DORA is a regulation aimed at improving the cybersecurity and operational resilience of financial institutions and their tech providers.
Why is Eastnets’ compliance with DORA significant?
This compliance not only enhances Eastnets' reputation but also assures customers of its reliability and commitment to high standards of resilience.
What measures did Eastnets take towards compliance?
Eastnets implemented thorough risk assessments, robust testing, and ongoing management of third-party relationships to ensure adherence to DORA.
How does DORA affect third-party providers?
DORA imposes stringent oversight on third-party technology providers, ensuring they meet specific operational and cybersecurity standards.
When does DORA enforcement begin?
The enforcement of DORA is set to commence in January 2025, necessitating timely compliance from affected entities.
