DORA 上線：歐盟新加密法規旨在增強網路安全和彈性

自 1 月 17 日起，歐盟境內的加密貨幣業務現受新的《數位營運彈性法案》(DORA) 管轄。

The Digital Operational Resilience Act (DORA), a new cryptocurrency regulation within the European Union (EU), came into effect on 17 January. This regulation aims to enhance cybersecurity and resilience among virtual asset service providers (VASPs) in the region.

《數位營運彈性法案》(DORA) 是歐盟 (EU) 內一項新的加密貨幣法規，於 1 月 17 日生效。該法規旨在增強該地區虛擬資產服務提供者（VASP）的網路安全和彈性。

As part of DORA, financial entities in the EU are now required to maintain a comprehensive register of their contractual arrangements with third-party IT service providers. This measure is designed to ensure safe infrastructure and effective risk management throughout the crypto industry.

作為 DORA 的一部分，歐盟的金融實體現在需要維護其與第三方 IT 服務提供者的合約安排的全面登記。該措施旨在確保整個加密產業的基礎設施安全和有效的風險管理。

DORA’s implementation broadens the scope of the EU’s Markets in Crypto-Assets Regulation (MiCA), which is focused on enhancing resilience against potential disruptions from cyberattacks and IT failures. Ultimately, this aims to bolster investor protection and market integrity.

DORA 的實施擴大了歐盟加密資產市場監管 (MiCA) 的範圍，該監管的重點是增強抵禦網路攻擊和 IT 故障潛在幹擾的能力。最終，這旨在加強投資者保護和市場誠信。

According to Matt Sullivan, deputy general counsel at MoonPay, DORA will have a significant impact on crypto firms licensed under MiCA. MoonPay, which was recently licensed by the Dutch financial regulator, is ensuring compliance with DORA by adjusting internal policy and procedures, and conducting a thorough review of third-party vendor relationships.

MoonPay 副總法律顧問 Matt Sullivan 表示，DORA 將對 MiCA 許可的加密貨幣公司產生重大影響。 MoonPay 最近獲得了荷蘭金融監管機構的許可，透過調整內部政策和程序以及對第三方供應商關係進行徹底審查，確保遵守 DORA。

Mark Jennings, head of Europe at the Gemini crypto exchange, highlighted DORA’s importance in reinforcing the operational resilience of the financial sector against risks related to information and communications technology (ICT). In preparation for DORA, Gemini has implemented a strategic operational resilience framework, which includes a focus on ICT risk management and governance.

Gemini 加密貨幣交易所歐洲主管 Mark Jennings 強調了 DORA 在增強金融部門抵禦資訊和通訊技術 (ICT) 相關風險的營運彈性方面的重要性。為了準備 DORA，Gemini 實施了策略營運彈性框架，其中重點關注 ICT 風險管理和治理。

Cathy Yoon from Wormhole Foundation pointed out that the impact of DORA extends beyond VASPs, also affecting crypto asset issuers (CASPs) like Circle, the issuer of USD Coin (USDC). While many CASPs have already implemented strong cybersecurity measures, DORA may pose challenges for smaller service providers with limited resources. This could potentially lead to a consolidation of providers in the industry to meet DORA’s stringent security standards.

Wormhole Foundation 的 Cathy Yoon 指出，DORA 的影響不僅限於 VASP，還影響了美元幣（USDC）發行人 Circle 等加密資產發行人（CASP）。儘管許多 CASP 已經實施了強有力的網路安全措施，但 DORA 可能會為資源有限的小型服務供應商帶來挑戰。這可能會導致行業內提供者的整合，以滿足 DORA 嚴格的安全標準。

Finally, Chris Denbigh-White, head of security at Elwood Technologies, noted that the application of DORA underlines the importance of cybersecurity, third-party risk management and incident response protocols. He highlighted a growing focus on operational resilience, with DORA expected to support investor protection and overall market stability.

最後，Elwood Technologies 安全主管 Chris Denbigh-White 指出，DORA 的應用凸顯了網路安全、第三方風險管理和事件回應協定的重要性。他強調，人們越來越關注營運彈性，DORA 預計將支持投資者保護和整體市場穩定。