DORA: The Gift That Keeps on Giving - Carne Group

‍

Overview

In this CISO Inspired Summit masterclass, Eoin O'heochaidh, CISO at Carne Group, gives a practitioner's view of the Digital Operational Resilience Act (DORA), the EU regulation that came into force on 17 January 2025 to protect citizens' money and investments by making financial institutions operationally resilient.

Speaking as a CISO rather than a lawyer, Eoin walks through DORA's pillars, starting with ICT risk management, and explains why the regulation is more than a compliance exercise. He covers the strict incident reporting timelines, the shift towards resilience planning for critical business functions, the register of third-party ICT providers and how to prepare for enforcement.

Key takeaways

  • DORA is law, not a voluntary framework: unlike ISO 27001 or maturity models, it mandates that controls are actually in place and done properly.
  • Many technical teams react with 'we should have been doing all of this anyway', as little in DORA is new or unreasonable.
  • Incident reporting is now on very strict timelines, so security and ICT teams must raise the flag early and incident response managers must know exactly who to involve.
  • Firms must identify the critical business functions behind their regulated services, and any ICT that underpins them needs a business impact analysis, business continuity plan and disaster recovery plan.
  • Know where you stand: document any gaps between your programme and the regulation and have a clear plan for closing them.

Watch the full session on YouTube: DORA – The Gift That Keeps on Giving | Eoin O'heochaidh CISO Inspired Masterclass

Explore more masterclasses

View all
AI: Where Ambition Meets Reality - CAIO Inspired Summit Closing Panel
Artificial Intelligence
2
November
2026
AI: Where Ambition Meets Reality - CAIO Inspired Summit Closing Panel
Leaders from NatWest Group, HSBC and Reckitt discuss where AI is delivering real value, who should own it, why humans must stay in the loop and how organisations need to redesign work around it.
Rediscovering Proposition Innovation - E.ON
Marketing
2
November
2026
Rediscovering Proposition Innovation - E.ON
Andy Sage of E.ON explains how behavioural drivers, Maslow’s hierarchy of needs and the adoption curve can help marketers rethink product design, pricing, channels and partnerships.
Designing Embedded Systems with AI inside - Thales UK
Artificial Intelligence
2
November
2026
Designing Embedded Systems with AI inside - Thales UK
Anthony Collins of Thales UK explains how to design, explain and trust AI inside mission-critical embedded systems, from defining outcomes and managing data to guard rails, human oversight and red teaming.