Datadog Cloud Security Management Supports DORA Compliance

Datadog has announced that its Compliance Frameworks solution has been configured to support the Digital Operational Resilience Act (DORA) EU regulation, to provide customers with immediate real-time visibility into which misconfigurations in their environment affect their DORA audit. 

Reliable access to financial data is critical for organizations and individual consumers alike, making resiliency key for financial institutions responsible for managing this information. Organizations and the companies that provide them with services are increasingly being assessed on their risk management, business continuity planning, incident response and recovery, and cybersecurity measures, such as those specified under the DORA act. 

All financial market participants in the EU are subject to DORA, specifically:

• Financial entities (banks, payments providers, insurance providers, investment firms, credit rating agencies, etc.)
• Information and Communication Technology (ICT) service providers to financial entities (software, cloud, databases, etc.)

Steve Barrett, the VP of EMEA Enterprise for Datadog, said: “DORA can overlap with financial responsibility or data protection requirements. Datadog’s Cloud Security Management provides compliance frameworks that help you quickly evaluate how your security posture matches up against industry standards, so you can generate reports that identify critical security misconfigurations and other rule failures in your environments. Having a deep understanding of risk within your own system and your third-party services can help with addressing DORA concerns.”  

Compliance is a feature within Cloud Security Management, which automatically correlates 1500+ security detections with controls defined in 20+ industry standard benchmarks (e.g., SOC2, PCI-DSS, CIS, GDPR, and now DORA).

Datadog’s Compliance Frameworks solution, provide customers with access to:

• Over 250 out-of-the-box rules mapped to DORA controls
• Remediation context, guidance, and triaging capabilities for all misconfigurations
• 15 month retention to evaluate and communicate posture change over time

Datadog delivers unprecedented visibility, continuous configuration audits, identity risk assessments, vulnerability checks, and real-time threat detection across your entire cloud infrastructure, all in a unified platform for seamless collaboration and faster remediation. Security and DevOps teams can act on the shared context of observability and security data to quickly prioritize and remediate issues.