Are you ready for DORA and NIS2? Discover how these regulations could transform your security strategy!
Welcome back to another episode of Razorwire! Today we unpack the DORA and NIS2 regulations with esteemed cybersecurity expert Richard Cassidy. I’m your host, Jim Rees, and I’ll be guiding the conversation for anyone navigating the evolving landscape of digital security in the financial sector.
In this information-packed episode:
- Discover why organisations are dangerously behind in DORA and NIS2 preparation
- Learn how these EU regulations could impact global operations, including US companies
- Explore the potential for hefty fines and personal liability for executives
- Understand the critical role of third party providers in compliance
- Get practical advice on assessing your organisation's readiness
- Uncover the challenges of implementing cross border information sharing
- Gain insights on budget planning and vendor alignment for compliance
Whether you're a CISO, IT professional or business leader, this episode offers crucial information to help you stay ahead of regulatory changes. Don't miss Richard's expert analysis and insider tips on preparing effectively for compliance. This episode is packed with invaluable insights you won't want to miss.
" Don't be looking at this, head in your hands and worry that you haven't got the stack. You most likely do have the capabilities. Now you've just got to understand how you go about aligning to DORA."
Richard Cassidy
Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen
In this episode, we covered the following topics:
- Regulatory Gap Analysis: Why organisations should start by analysing gaps between current performance and DORA and NIS2 regulations.
- Vendor Involvement: Why it’s essential to involve vendors and ensure they align with new regulations.
- Global Impact: Learn how DORA and NIS2 will impact organisations worldwide, especially those within the EU financial industry.
- Budget Implications: Advice on beginning regulatory analysis before budget renewal, for better allocation of resources.
- Contract Renegotiation: How to navigate the lengthy process and challenges of renegotiating contracts for compliance with new regulations.
- Third Party Security: Why we need to include audit rights and fine clauses in contracts with third party service providers.
- C-suite Accountability: Learn about the personal responsibility of the c-suite under DORA, including potential legal consequences.
- CISO Role Evolution: Find out how the CISO role is likely to gain more prominence and may replace the CIO in the future.
- Information Sharing Challenges: We discuss the difficulties organisations might face in sharing cybersecurity information.
- Implementation Recommendations: How to implement a simplified approach to aligning with DORA by assessing maturity and targeting domain-level improvements.
Resources Mentioned
