You can use the search function to find a range of UK Finance material, from consultation responses to thought leadership to blogs, or to find content on a range of topics from Capital Markets & Wholesale to Payments & Innovation.
This half-day workshop explores the regulatory regimes for operational resilience in both the UK and EU, so that firms can understand their existing and ongoing obligations to strengthen operational resilience. It focuses on understanding the two regimes, their similarities and differences, and practical means for holistic compliance in a cross-border context.
Strengthening operational resilience matters but is not a 'one and done' set of requirements.
Firms subject to the UK operational resilience regime should already be familiar with the core rules that took effect on 31 March 2025.
For firms that also operate in the EU, understanding the similarities and differences with DORA is important to ensure integrated and streamlined compliance, including in areas such as testing, incidents, and third-party risk management. For managing incidents in particular, updated incident reporting requirements will apply in the UK from 18 March 2027. It is important for firms to understand both frameworks as they look to build incident management regimes in the EU under DORA.
The UK and EU operational resilience regime compared
Operational resilience and ICT risk management
Incident management
Testing
Third-party risk management
Partner, Financial Services Regulatory, Winston Taylor
Martin Dowdall is a partner in the financial services regulatory team at Winston Taylor with a particular focus on banking, payment services and the r...
Martin Dowdall is a partner in the financial services regulatory team at Winston Taylor with a particular focus on banking, payment services and the regulation of cryptocurrencies and other digital assets.
His clients include banks, asset managers, payment service providers, the operators of financial market infrastructure, and fintech firms.
Martin has extensive experience in assisting clients with banking and other regulatory authorisation applications both in private practice and while on secondment at a major fintech, and regularly advises on the structuring of new products and services and the innovative use of new technologies including DLT and AI.
By downloading this document, you understand and agree that any sharing, distribution or republishing of the content, without prior written authorisation from the author or content managers at UK Finance, shall be constituted as a breach of the UK Finance website terms of use.
