DORA and cyber resilience: 2025 priorities of the European Joint Committee

The Joint Committee's 2025 Priorities: Digital Operational Resilience and Cybersecurity

The Joint Committee of European Supervisory Authorities (EBA, EIOPA, and ESMA) has published its Annual Report 2025, identifying digital operational resilience and cybersecurity as strategic pillars for European financial markets. The focus has been on protecting consumers in an accelerated digitalization context, with particular emphasis on the implementation of the DORA regulation.

Quick Response

DORA at the Heart of Cyber Resilience Strategy

The Digital Operational Resilience Act (DORA) represents the most ambitious regulatory framework for digital operational resilience in Europe. The Joint Committee has led the implementation of this regulation, focusing on uniform standards for managing cyber incidents and protecting critical financial infrastructures. Particular attention has been paid to incident response capabilities and breach remediation, with the goal of reducing the impact of ransomware attacks and other advanced threats.

Consumer Protection in the Digital Age

In 2025, the Joint Committee has intensified efforts to protect financial consumers in an increasingly digitalized context. This includes analyzing emerging risks related to digital financial services, from the use of crypto-assets to online trading platforms. The focus has been on transparency and risk awareness, with particular regard to the vulnerabilities of less experienced users.

Innovation and Regulatory Simplification

The Joint Committee has supported financial innovation through the European Forum for Innovation Facilitators (EFIF), promoting the adoption of emerging technologies such as blockchain and AI in compliance with existing regulations. At the same time, it has worked to simplify the European regulatory framework, reducing complexity in areas such as sustainable finance and PRIIPs products.

NIS2 Adjustment: Alignment with New Regulations

The report highlights the importance of aligning cybersecurity policies with the NIS2 Directive, which expands the scope of cybersecurity norms to key sectors of the digital economy. The Joint Committee has collaborated with national authorities to ensure consistent implementation of the new provisions, with particular attention to risk management and incident reporting.

Cross-Sector Risk Monitoring: An Integrated Approach

The Joint Committee has strengthened its role as a coordination platform among European supervisory authorities, promoting more efficient information exchange between EBA, EIOPA, ESMA, the European Commission, and the European Systemic Risk Board (ESRB). This integrated approach is fundamental to identifying and mitigating risks that span financial sectors, such as systemic crises related to geopolitical shocks or cyber attacks.

Progress on the European Single Access Point (ESAP)

Among other initiatives, the Joint Committee has accelerated the development of the European Single Access Point (ESAP), a key project to improve access to financial information across the European Union. The ESAP aims to create a single portal for financial data, facilitating transparency and compliance.

Conclusions