Application of DORA has started – FIN-FSA to focus on the management of ICT risks and cyber-threats in its supervision
The objective of DORA (Digital Operational Resilience Act) is to improve consumers’ data security and the continuity of services. It brings about significant reforms in the operational resilience of the financial sector and covers almost all entities supervised by the FIN-FSA.
The Regulation of the European Parliament on digital operational resilience for the financial sector entered into force on 17 January 2023 and applies from 17 January 2025. DORA (Digital Operational Reliability Act) applies extensively to financial market participants in the EU, such as banks, insurance companies, investment firms and ICT companies providing services to them. In its supervision, the FIN-FSA will focus on the management of supervised entities’ ICT and information security risks, the ICT incident reporting process and the supervision of ICT providers’ risk management.
– DORA introduces uniform and transparent rules for the financial sector which are necessary to ensure that institutions in the sector can effectively identify, address and prevent various digital threats. In the current global situation, these threats are very real, states Samu Kurri, Head of Department.
All entities within the scope of application of the Regulation will have a new requirement to report annual costs caused by ICT-related incidents. The Regulation also enables the voluntary exchange of information on cyber threats between supervised entities and the reporting of cyber threats to the supervisory authority. Furthermore, supervised entities are obliged to submit a register of ICT contracts to the FIN-FSA on an annual basis.
The FIN-FSA has obliged the most significant supervised entities to perform threat-led penetration tests at regular intervals.
– For instance significant banks, the stock exchange and the central securities depository are directly compelled by DORA to perform these threat-led data security tests. However, we have also obliged smaller banks and insurance-sector participants to engage in these tests in Finland. By doing so, we foster the achievement of cyber security in the financial sector on an extensive scale, says Kurri.
In Finland, DORA applies to over 400 supervised entities. There is no transitional period for the application of the Regulation, which means that the requirements must be complied with from 17 January 2025.
See also
Regulation on the digital operational resilience of the financial sector – DORA (in Finnish)
For further information, please contact
Samu Kurri, Head of Department. Requests for interviews are coordinated by FIN-FSA Communications, tel. +358 9 183 5030 (weekdays 9.00–16.00).
Keywords
Contacts
Media phone service number
can be contacted on weekdays 9–16, except on Holy Thursday and New Year’s Eve on 9–13.
Finanssivalvonta, or the Financial Supervisory Authority (FIN-FSA), is the authority for supervision of Finland’s financial and insurance sectors. The entities supervised by the authority include banks, insurance and pension companies as well as other companies operating in the insurance sector, investment firms, fund management companies and the Helsinki Stock Exchange. We foster financial stability and confidence in the financial markets and enhance protection for customers, investors and the insured.
Alternative languages
- FIN: Finanssisektorin digitaalista häiriönsietokykyä koskevan asetuksen soveltaminen alkoi – Finanssivalvonta keskittyy valvonnassaan ICT-riskien ja kyberuhkien hallintaan
- SWE: Tillämpningen av förordningen som gäller digital operativ motståndskraft för finanssektorn inleddes – Finansinspektionen fokuserar i sin tillsyn på hanteringen av IKT-relaterade risker och cyberhot
Subscribe to releases from Finanssivalvonta
Subscribe to all the latest releases from Finanssivalvonta by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Finanssivalvonta
De europeiska och inhemska stresstesterna är klara: bankerna har god motståndskraft också mot omvärldsförändringar som följer av geopolitiska spänningar4.8.2025 09:30:00 EEST | Pressmeddelande
Europeiska bankmyndigheten (EBA) har publicerat resultaten av de EU-omfattande stresstesterna och Finansinspektionen stresstestresultaten för de banker som står under dess direkta tillsyn. Enligt resultaten är banksektorn i Finland väl rustad mot en kraftig nedgång i omvärlden. I utgångsläget var bankernas resultatförmåga historiskt stark när stresstesterna inleddes, vilket innebar en lägre grad av stress i jämförelse med tidigare tester. Det svaga makroekonomiska stresstestscenariot var denna gång särskilt aktuellt då det också tog hänsyn till den skärpta handelspolitiken till följd av de amerikanska tullarna.
Eurooppalaiset ja kotimaiset stressitestit valmistuneet: pankeilla hyvä kestokyky myös geopoliittisten jännitteiden tuomille toimintaympäristön muutoksille4.8.2025 09:30:00 EEST | Tiedote
Euroopan pankkiviranomainen (EBA) on julkaissut EU:n laajuisten stressitestien tulokset ja Finanssivalvonta kansallisten suorassa valvonnassaan olevien pankkien tulokset, joiden mukaan Suomen pankkisektori kestäisi toimintaympäristön merkittävän heikkenemisen. Lähtötilanteessa pankit aloittivat stressitestit historiallisen vahvalla tuloksentekokyvyllä, mikä lievensi stressiä verrattuna aiempiin testeihin. Stressitestien heikomman kehityksen skenaario oli tällä kertaa erityisen ajankohtainen ottaessaan huomioon myös kauppapolitiikan kiristymisen USAn asettamien tullien myötä.
European and domestic stress tests completed: banks’ resilience good also against changes in the operating environment resulting from geopolitical tensions4.8.2025 09:30:00 EEST | Press release
The European Banking Authority (EBA) has published the results of its EU-wide stress test exercise, and the Financial Supervisory Authority (FIN-FSA) has published the results of the banks that are subject to its direct supervision. The results show that the Finnish banking sector would withstand a significant weakening of the operating environment. At the start of the stress test horizon, the banks’ profit performance was historically strong, which eased the stress compared to the previous exercises. The adverse scenario of the stress test exercise was particularly relevant because it took into consideration the tightening of trade policies brought about by the tariffs imposed by the United States.
Finansinspektionens tematiska bedömning: organisationer inom den finansiella sektorn använder artificiell intelligens i sina interna processer, användningen i kundgränssnittet ökar27.6.2025 11:00:00 EEST | Pressmeddelande
Största delen av företagen i den finansiella sektorn uppger att de antingen redan använder AI-lösningar eller att de planerar att införa dem. Största delen av AI-lösningarna används för närvarande i aktörernas interna processer, men tillämpningen i kundgränssnittet kommer att öka under de närmaste åren.
Finanssivalvonnan teema-arvio: finanssisektorin organisaatiot käyttävät tekoälyä sisäisissä prosesseissaan, hyödyntäminen asiakasrajapinnassa lisääntyy27.6.2025 11:00:00 EEST | Tiedote
Suurin osa finanssisektorin yrityksistä kertoo joko jo käyttävänsä tekoälyratkaisuja tai suunnittelevansa sen aloittamista. Valtaosa tekoälyratkaisuista on tällä hetkellä käytössä toimijoiden sisäisissä prosesseissa, mutta soveltaminen asiakasrajapinnassa kasvaa lähivuosina.
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom