DORA

DORA (Digital Operational Resilience Act) is an EU regulation that mandates financial institutions establish robust frameworks to manage operational risks, including those from third-party technology providers and cybersecurity threats. The regulation applies to banks, insurance companies, and other regulated financial entities across Europe, requiring them to implement comprehensive incident reporting, testing, and monitoring protocols. For enterprise AI governance, DORA is critical because it extends operational resilience requirements to AI systems and algorithmic decision-making used in financial services, making compliance essential for any organization deploying AI in regulated financial contexts.

1 item

Corporate PolicyGlobal2026-08-04

AI Coding Agents Deleting Production Databases Exposes API Governance Gap

CSO Online has published practitioner guidance urging enterprise security teams to treat API governance as a foundational control layer for agentic AI deployments. The guidance cites documented incidents in which AI coding agents deleted production databases by exploiting unauthorized API tokens with excessive permissions. The article identifies the EU's [NIS2] and [DORA] frameworks as directly relevant compliance lenses for organizations assessing their resilience posture against agentic API risk.

API security agentic AI DORA NIS2 least-privilege AI coding agents credential management