Is your company within DORA's scope?

Is your company within DORA's scope? If so, implementing ISO standards can be beneficial.

Although DORA doesn't directly mention cybersecurity standards like ISO 27001, ISO 27002, and ISO 27005, or business continuity standards such as ISO 22301, these standards incorporate ICT risk management concepts that align with DORA’s Chapter II and CDR 2024-1774.

For IT suppliers, obtaining ISO 27001 certification is the most straightforward way to comply with DORA Article 28.