Digital Operational Resilience Act (DORA) 2025 | Insight Events Denmark | 8 December 2025 | Tivoli Hotel & Congress Centre, Arni Magnussons Gade 2, 1577 Copenhagen, Denmark

This event is an EU regulation aimed at strengthening the digital resilience of the financial sector. It was adopted on 14 December 2022 and entered into force on 17 January 2023. The regulation became applicable from 17 January 2025.

The event supplier register must be ready for submission to national supervisory authorities by 30 April 2025.

Key points of the event regulation:

Cybersecurity Standardization :
• This event aims to standardize and improve the level of cybersecurity in the financial sector across the EU. This will help companies withstand and recover from cyberattacks.

Risk-Based Approach :
• The regulation is based on a risk-based approach, meaning that companies must implement appropriate technical, operational and organizational measures based on the likelihood and severity of security incidents.

Comprehensive Coverage :
• This event applies to almost all organizations in the financial sector, including banks, insurance companies, and ICT service providers.

Reporting Requirements :
• Companies must report major ICT incidents to relevant authorities and conduct regular tests of their digital resilience.

The conference will provide a day of insight, networking and in-depth discussions. The conference brings together experts and professionals from the financial sector to share knowledge and experiences on DORA implementation and compliance.

The program will be curated to cover the most current topics within the event, including status updates, implementation strategies, and handling critical third-party providers. Throughout the day, there will be opportunities to ask questions and get concrete answers from our experts, as well as participate in networking breaks and a closing networking reception.

Target group for this conference:
The conference is relevant for anyone who works with or is responsible for the company's compliance
with cybersecurity and the DORA regulation. The following types of companies are covered by DORA:

• Credit institutions, payment institutions, e-money institutions and investment firms
• Insurance and reinsurance companies, large insurance intermediaries and occupational pension companies
• Central securities depositories, regulated markets, trade repositories, alternative investment fund managers, investment management companies, central counterparties and data reporting service providers
• Cryptoasset companies that will be covered by the upcoming regulation in this area (MiCA Regulation)
• Administrators of critical benchmarks, crowdfunding service providers, securitisation repositories and credit rating agencies
• IT suppliers who are systemic at EU level

We look forward to an inspiring and educational day with you and your colleagues at the conference.