Financial institutions are worried about AI-driven attacks - here's what DORA expects you to do

AI-driven cyber threats are no longer theoretical. Financial institutions across Europe are actively assessing the implications of increasingly powerful tools that can identify and exploit vulnerabilities at scale, and regulators are watching closely.

The European Central Bank has made clear that cyberattacks represent a serious and growing threat to banks and financial market infrastructures, and that given the high level of interconnectedness within the financial sector, a single attack can threaten the stability of the entire ecosystem. For organisations operating in this environment, concern is not enough. Under DORA, action is required.

Why the finance sector is on alert

Banks and financial institutions face a particular combination of risks: complex IT environments, extensive third-party dependencies, and a profile that makes them high-value targets. The introduction of AI into this landscape amplifies every one of these risks. Vulnerabilities are discovered faster, attacks are executed with greater automation, and the barriers for malicious actors are lower than ever. The result is a more volatile and unpredictable environment – one that traditional, periodic security reviews were never designed to handle.

DORA’s response: operational resilience

DORA was designed precisely for this kind of environment. Rather than setting minimum standards to be met once, it establishes a framework for continuous preparedness, built around five key areas:

1. ICT risk management
2. Incident reporting
3. Digital operational resilience testing
4. Third-party risk management
5. Information sharing

Together, these create an obligation to be ready; not just to have policies in place, but to demonstrate that they work.

From awareness to accountability

One of the most significant shifts under DORA is where accountability sits. Management bodies are expected to take ownership of risk management, ensure appropriate controls are in place, and oversee compliance efforts. This is not an IT issue delegated to a technical team. It is a leadership responsibility, and regulators will expect evidence of it.

The implementation challenge

Understanding DORA is one thing. Implementing it is another. Many organisations struggle to translate regulatory requirements into actionable controls, maintain up-to-date documentation, and coordinate consistently across teams and systems. Without structure, compliance efforts become reactive, something that gets addressed before an audit rather than maintained as a continuous discipline. That approach carries real risk, both operationally and in terms of regulatory exposure.

Building a resilient foundation

Meeting DORA expectations requires a clear overview of risks and controls, defined processes for incident response, ongoing monitoring and assessment, and centralised documentation and reporting. This is not just about satisfying regulators; it is what enables an organisation to actually function with confidence when something goes wrong.

A shifting baseline

AI is raising the bar for what it means to be secure. Financial institutions can no longer rely on periodic reviews or isolated efforts. The organisations that will weather this environment are those that build continuous visibility, coordinated action, and demonstrable control into their daily operations – not those that treat compliance as a box to check.

Under DORA, resilience is not assumed. It must be built, maintained, and proven. For management teams carrying personal accountability under DORA, having the right tools in place is not optional. Trustlinks gives you the oversight, documentation, and confidence to lead compliance, not just report on it.