Online Workshop: “Cyber Resilience in the Financial Sector – How to Build Resilience in Compliance with Regulations,” October 6, 2026: Summary

The event has taken place:

Online workshop titled “Cyber Resilience in the Financial Sector—How to Build Resilience in Compliance with Regulations”

organized by MMC Polska.

Bartosz Wyżykowski, PhD, partner at DLK Legal, delivered a presentation titled:

First Practical Lessons from the Implementation of DORA, NIS2, and UKSC—Key Intersections and Implementation Challenges

The presentation covered, among other topics:

• DORA – obligations related to ICT risk management arising from cooperation with external ICT service providers (ICT TPSP), covering the four stages of the lifecycle of such a relationship: due diligence, contract conclusion and its required content, ongoing monitoring of contract performance, and termination of the relationship,
• UKSC / NIS2 – the scope of application of the new regulations, who qualifies as a critical or important entity, as well as the obligations that such entities will have to implement in the near future (mostly by April 3, 2027), including, among other things, the implementation of an information security management system (ISMS), including business continuity plans (BCPs), and incident management procedures),
• Cyber Resilience Act (CRA) – requirements for products with digital components, including rules for their design and development, as well as reporting obligations. Full implementation of the CRA will not take effect until December 11, 2027, although the obligations to report actively exploited vulnerabilities and serious incidents have been in effect since September 11 of this year.

We invite you to participate in future events featuring DLK Legal attorneys!

If you want to stay up to date on regulatory matters, sign up to receive information about important regulatory and industry events, as well as DLK Legal’s activities: Sign up for notifications