The DORA Credit Union Knowledge Hub aligns with the EU’s broader digital finance strategy and complements existing Central Bank of Ireland guidance on ICT risk, outsourcing, and operational resilience. It is designed to help credit unions transition from exemption to full compliance in a structured, evidence-based manner.
This hub provides Irish credit unions with authoritative guidance, tools, and structured support to achieve compliance with the Digital Operational Resilience Act (DORA) by January 2028. It outlines the regulatory context, board-level responsibilities, and practical steps to embed DORA-aligned governance and controls within the credit union.
The Digital Operational Resilience Act (DORA) represents a major development in EU financial regulation, establishing a harmonised and directly applicable framework governing ICT risk management, ICT-related incident reporting, digital operational resilience testing, ICT third-party risk management, and cyber-related information-sharing arrangements across the financial sector.
Although DORA became fully applicable to most EU financial entities on 17 January 2025, Irish credit unions benefit from a national exemption period granted under Article 2(4) of DORA until January 2028. This exemption period provides boards with critical time to prepare for compliance in a structured and proportionate manner while ensuring that governance, risk management, and operational resilience arrangements are capable of meeting DORA’s standards once the exemption expires.
The purpose of this Resource Hub is to assist boards, senior management, and compliance functions in understanding the regulatory expectations arising under DORA and in translating those expectations into practical, board-led, and evidence-based governance outcomes.