PRMIA Exam 8020 Topic 2 Question 4 Discussion

Definition of DORA

The Digital Operational Resilience Act (DORA) is a regulation by the European Union (EU) aimed at strengthening the digital resilience of financial institutions.

It establishes a regulatory framework for managing information and communication technology (ICT) risks in the financial sector.

Key Objectives of DORA

Ensures that financial institutions can withstand, respond to, and recover from cyber threats and ICT-related disruptions.

Introduces standards for risk management, incident reporting, and third-party ICT risk oversight.

Why Other Answers Are Incorrect

Option

Explanation

A . Domain for Operational Risk Act.

Incorrect -- No such regulation exists under this name.

B . Digital Operational Risk Act.

Incorrect -- The official name is Digital Operational Resilience Act (DORA).

C . Daily Operational Resilience Act.

Incorrect -- DORA is not focused on daily operations but rather long-term digital resilience.

PRMIA Reference for Verification

PRMIA Risk Governance & Digital Resilience Standards

European Commission's Official DORA Regulation