DORA Compliance

Катерина Дубас Legal IT Group
Kateryna Dubas
Head of Privacy and Cybersecurity Practices
Send a request
We bring you into compliance with DORA (Regulation (EU) 2022/2554), the directly applicable regulation for the EU financial sector and critical ICT providers. We prepare the documentation package and advise during implementation
Кібербезпека Legal It Group

Why Us

Because FinTech companies need to meet DORA requirements

Cybersecurity lawyers who know exactly which document, with what content, each of DORA's five pillars and the relevant RTS/ITS require
  • A Team of Three FIPs

    Certified privacy professionals: CISSP, CIPP/E, CIPP/US, CIPM, CIPT, FIP.
    icon
  • We know exactly what the law requires

    A combination of legal, technical and business experience
    about_icon2
  • Working with corporations

    We build governance for market leaders and international companies
    about_icon3
  • CIPT and CISSP on the team

    We see which controls actually work as evidence of compliance
    about_icon4
Send a request
decor
Кібербезпека та privacy engineering - Legal IT Grpup

We'll help create new procedures and revise existing ones, to meet business goals and comply with DORA while taking regulators' requirements into account


Our Services

  • Applicability and the proportionality principle

    icon-vectors
    First we establish whether you fall within the scope of the Regulation. DORA covers roughly 20 types of financial entities + critical ICT providers. Result: an applicability conclusion + the number and description of obligations.
  • ICT Risk Management Framework

    icon-vectors
    We create the framework and processes for risk management: a resilience strategy (approved by management), information security policy, access/MFA policies, cryptography, network, change management, vulnerability management, etc. Result: ICT RM Framework + policy package.
  • Register of Information and third-party inventory

    icon-vectors
    The Register of Information is a register of all ICT contracts, submitted annually, a policy for ICT services supporting critical functions, exit strategies. Result: Register of Information + third-party management policies.


Certified ExpertsCertified Experts

Our team holds certifications in privacy and cybersecurity

Internationally Recognised Expertise

FIP_Dubas
Катерина Дубас_кібербезпека
FIP_Tarasiuk

blog_iconRelevant and Practical Articles

  • Data protection officer
  • AI compliance officer
  • Data privacy compliance
  • Diia.City
  • Digital Millennium copyright Act
  • Trademark in IT
Go to Blog

We Write About What We Practise

ІP, GDPR, contracts and disputes, as well as the legal aspects of implementing technologies such as artificial intelligence and best practices for implementing specific legal solutions.