DORA: The operational reality of continuous monitoring at scale

DORA isn’t difficult because of how it’s written. It’s difficult because of what it demands operationally.

The regulation forces a structural rethink of how organizations build risk visibility, assign control ownership, and evidence resilience - particularly across Critical Important Functions (CIFs), complex technology estates, and third-party dependencies.

In this 50-minute expert conversation, Panaseer’s VP of Global Partnerships and Sales, Neil Hooper, is joined by advisory board member Andreas Wuchner to unpack the real challenges organizations face when implementing DORA at scale.

Together, they explore:

• CIF identification and scope creep – why critical function mapping is a continuous business-technology alignment exercise, not a one-off inventory
• Fragmented technology landscapes – the reality of mapping CIFs across legacy systems, cloud infrastructure, and third-party platforms simultaneously
• Multi-layered control ownership – how teams validate controls and manage evidence across hundreds of CIF, control, and ICT service dependencies in real time
• Third-party dependencies at scale – why traditional supplier risk frameworks fall short, and how to rethink vendor oversight for continuous visibility
• The board conversation – how to communicate operational complexity without oversimplifying, and secure buy-in for structural change
• Continuous controls monitoring – the infrastructure shift required to move from periodic testing to real-time control effectiveness

Ideal for: CISO and CTO offices, security operations leaders, enterprise risk teams, and organizations actively implementing DORA across complex, multi-regional environments.