DORA Year Two: Can Your SOC Actually See the Attack?

The Digital Operational Resilience Act became enforceable in the European Union in January 2025, prompting financial entities to focus on establishing risk governance and other foundational measures in its first year. In the second year, financial entities are facing a more challenging phase of DORA implementation. The first year was spent assessing third-party service providers, updating contract clauses, and documenting incident escalation workflows. Financial entities had to establish a foundation for compliance during this initial period. Now, the focus is shifting to more complex aspects of DORA. The ability of a Security Operations Center to detect attacks is a key consideration in this phase.