DORA and NIS2: what you need to know about today’s cybersecurity regulations

**Executive summary:** This report outlines the impact of two EU cybersecurity measures—DORA (applicable to financial entities and their third parties) and NIS2 (a directive covering essential and important sectors)—summarising their scope, reporting and risk-management obligations, enforcement timelines and penalties, and recommended organisational actions (risk assessments, 24x7 monitoring, resilience testing, incident response exercises and third‑party contractual alignment) to achieve compliance.