IBM Designated as a Critical Third-Party Provider Under EU DORA

ARMONK, N.Y., Dec. 5, 2025 /PRNewswire/ — The Digital Operational Resilience Act (DORA) is a European Union regulation designed to ensure that financial entities—such as banks, insurance companies, and investment firms—and their critical Information and Communication Technology (ICT) providers can withstand and recover from technology disruptions, including cyber incidents and technical failures.

IBM (NYSE: IBM) was recently designated by the European Supervisory Authorities (EBA, EIOPA, ESMA) as a critical ICT third-party provider under DORA. This designation reflects the essential role that technology providers like IBM play in supporting the resilience of Europe’s financial sector.

The objective is clear: strengthen operational resilience across Europe’s financial ecosystem, mitigate systemic risk, and ensure trust in the stability and security of digital services.

What This Means for IBM and our Clients

…