# A stepping stone towards holistic application risk and compliance management of the Digital Operational Resiliency Act (DORA)

DevFeed: [A stepping stone towards holistic application risk and compliance management of the Digital Operational Resiliency Act (DORA)](<https://devfeed.tech/articles/a-stepping-stone-towards-holistic-application-risk-and-compliance-management-of-the-digital-operational-resiliency-act-dora-7824.md>)

Original publisher: [Read original article](<https://snyk.io/blog/application-risk-digital-operational-resiliency-act/>)

Author: Ben Desjardins; Mathias Conradt

Published: 2024-07-11T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Resilience](<https://devfeed.tech/topics/resilience.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [ai-coding](<https://devfeed.tech/topics/ai-coding.md>), [Development](<https://devfeed.tech/topics/development.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>)

Tags: [ai-coding](<https://devfeed.tech/tags/ai-coding.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [development](<https://devfeed.tech/tags/development.md>), [devops](<https://devfeed.tech/tags/devops.md>), [digital](<https://devfeed.tech/tags/digital.md>), [executive](<https://devfeed.tech/tags/executive.md>), [finserv](<https://devfeed.tech/tags/finserv.md>), [operational](<https://devfeed.tech/tags/operational.md>), [pmm](<https://devfeed.tech/tags/pmm.md>), [resiliency](<https://devfeed.tech/tags/resiliency.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

The article explains how the European Union's Digital Operational Resilience Act (DORA) addresses ICT-related risks and business continuity for financial institutions and critical service providers. It presents application security across the development, deployment, and maintenance lifecycle as foundational to DORA compliance, emphasizing application vulnerabilities, software complexity, rapid development, and unmanaged use of AI coding assistants as sources of operational risk.

## Source excerpt

The European Union's Digital Operational Resilience Act (DORA) establishes a comprehensive framework to manage Information and Communication Technology (ICT) related risks and ensure business continuity for financial institutions and critical service providers.