Financial Services Cloud Forum

DORA is already reshaping operational norms - now the focus is on translating its intent into strategic advantage

The Malta Stock Exchange plc’s 2025 Business Review captures key insights from this year’s stellar Governance, Risk, Compliance and ESG Conference, where I joined peers from across the financial ecosystem to explore how DORA is reframing resilience, not as a static requirement but as a dynamic capability.

Many of DORA’s provisions reflect well-established best practices. The complexity lies not in the principles themselves, but in translating them into operational reality, especially across extended supply chains and multi-jurisdictional environments.

One idea I shared: third-party risk management is becoming a strategic differentiator. It’s no longer just about being compliant, it’s about being easy to do business with, proactively contributing to client success, and reinforcing sector-wide stability.

I also referenced author Jim Collins’ concept of the "Genius of the And":
- It's possible to pursue growth 𝒂𝒏𝒅 act as a responsible digital citizen.
- It's possible to adopt AI 𝒂𝒏𝒅 build trust.
- It's possible to meet regulatory expectations 𝒂𝒏𝒅 build resilience as a source of strategic advantage when regulation is treated as a design input, not a constraint.

The real opportunity lies in identifying smart, no-regret moves: actions that strengthen trust, simplify collaboration, and create long-term value across the ecosystem, regardless of regulatory pressure.

Full publication available https://online.fliphtml5.com/ktvc/vzlq/#p=1