In 2025, enterprises face mounting challenges in meeting new regulatory requirements and maintaining compliance. This year marks the full implementation of the Digital Operational Resilience Act (DORA) for countries part of the European Union (EU), requiring financial institutions as well as certain third-party service providers to demonstrate their ability to withstand, respond to, and recover from various disruptions and cyberthreats. Meanwhile, in the United States, the Cybersecurity, and Infrastructure Security Agency (CISA) is finalizing mandatory cyberattack reporting regulations for those organizations that fall into the category of Critical Infrastructure as defined by the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA).
Read more