Sweden’s Financial Supervisory Authority (FI) has announced it will conduct an in-depth analysis of the digital operational resilience of selected Swedish financial companies, focusing on their implementation of the Digital Operational Resilience Act (DORA) regulations.

FI said the digital operational resilience of the Swedish financial sector is one of its supervisory priorities in 2025, due to the current geopolitical situation and an increasingly digitalised and interconnected financial market.

The authority said these factors place “high demands” on financial firms' resilience to technological disruptions and their ability to ensure good security and resiliency of their network and information technology systems.

The analysis will be carried out in three phases in 2025 through three separate surveys to capture a comprehensive overview of companies' implementation and compliance with the DORA regulations.

FI has selected 50 Swedish financial companies that will be included in the analysis, including banks, insurance companies, payment institutions and trading platforms.

The European Union regulation on DORA came into force on 17 January 2025 and is aimed at most companies that are currently under FI's supervision.

The regulatory framework includes higher requirements for companies to manage information and communication technology (ICT) risks, report ICT-related incidents, test digital operational resilience and manage ICT-related third-party risks.

FI head of the resilience and preparedness department, Linda Löfgren, said: "The financial sector is not only highly digitalised but also interconnected and highly dependent on a high level of trust, which is a vulnerability that FI has identified.

“The resilience of financial undertakings to technical disruptions is crucial both to reduce the risk of disruptions in critical financial services and to ensure confidence in and stability in the financial system. This is particularly important in view of the international situation.”

She added that through FI’s in-depth analysis, the authority intends to follow up on the financial sector's digital operational resilience in the coming year.

---