About this episode

The episode discusses the expectations of regulators regarding digital operational resilience under the EU's DORA.

DORA is no longer theoretical. The EU’s Digital Operational Resilience Act (Regulation (EU) 2022/2554) is in force. Financial institutions and the organizations that support them must now demonstrate measurable digital operational resilience. Regulators will expect clear evidence of ICT risk management, incident response readiness, third-party oversight, and governance accountability. More importantly — what will regulators expect to see when they examine your identity and access governance c...

People in this episode

Host: YouAttest

Guest: Ralf Menegatti

Topics covered

• Digital Operational Resilience
• Regulatory Compliance
• ICT Risk Management
• Incident Response
• Third-Party Oversight
• Governance Accountability

Keywords

• DORA
• Digital Operational Resilience Act
• ICT risk management
• incident response
• third-party oversight
• governance accountability

Mentioned in this episode

Organizations: EU, Digital Operational Resilience Act, Regulation (EU) 2022/2554, YouAttest

More episodes of #AuditTuesday GRC Podcast

• Let's talk to The GRC Recruiter - #AuditTuesday w/ Pete Strouse · April 7, 2026 · 36 min
• Time for an Identity Risk Assessment w/ Neil Chapman, Ph.D., and IntraSystems · March 24, 2026 · 40 min
• #AuditTuesday - AI Governance in 2026 w Reliath AI · February 24, 2026 · 1h 1m
• Finding (and Auditing) Those Microsoft Share Files w/ Alan Sugano · February 17, 2026 · 35 min
• #AuditTuesday - Executing SCuBA Compliance, featuring Jason Dunn-Potter (CW5-R) and Allgress · January 27, 2026 · 57 min
• Auditing Microsoft Active Directory for Compliance & Zero Trust Security · January 14, 2026 · 28 min

Explore listener stats, chart rankings, contacts and more on the #AuditTuesday GRC Podcast podcast page.