Open Source in Finance Forum London 2025

The Digital Operational Resilience Act (DORA) is a game-changer for the EU financial services industry, establishing uniform ICT risk management, incident reporting, and third-party risk regulations. Unlike previous sector-specific frameworks, DORA mandates a horizontal implementation across entire firms, ensuring a ‘Minimum Viable Bank’—continuity of critical services amid disruption.
DORA aligns with the financial sector’s shift toward decentralised technology models, where hybrid cloud adoption has introduced operational complexity. While regulatory compliance may seem burdensome, DORA presents an opportunity: fostering a tech-first mindset, enhancing resilience, and driving strategic modernization. However, challenges remain—smaller firms may struggle with costly penetration testing, while managing fourth- and fifth-party risks requires increased supply chain visibility.
A successful DORA implementation hinges on open hybrid cloud platforms, enabling interoperability, scalability, and AI-driven innovation. Rather than a regulatory checkbox, DORA should be seen as an industry-wide resilience strategy, securing financial services for the future.