DORA, Business Continuity & Third-Party Risk: The Hidden Gaps in Resilience

Article

Regulations set the baseline for third-party risk, but true resilience requires a proactive approach. In this Q&A, Jeff Simmons discusses how firms can go beyond compliance by strengthening exit strategies, integrating business continuity, and managing supply chain risks to ensure operational stability.

Feb 26, 2025

Jeff Simmons, Senior Advisor, Alba Partners

Tags: Resilience Vendor and Third Party Risk

DORA, Business Continuity & Third-Party Risk: The Hidden Gaps in Resilience

The views and opinions expressed in this content are those of the thought leader as an individual and are not attributed to CeFPro or any other organization

Organizations should go beyond regulatory requirements by tailoring exit strategies to critical business functions rather than relying on generic plans.
Exit strategies must align with business continuity efforts by integrating clear triggers and accounting for supplier dependencies.
DORA and similar regulations highlight the need for IT resilience, but firms must achieve full visibility into their supply chains, including fourth-party risks.
Planning for supplier insolvency should extend beyond replacements to include crisis communications, service continuity, and mitigation strategies.