DORA 上线：欧盟新加密法规旨在增强网络安全和弹性

自 1 月 17 日起，欧盟境内的加密货币业务现受新的《数字运营弹性法案》(DORA) 管辖。

The Digital Operational Resilience Act (DORA), a new cryptocurrency regulation within the European Union (EU), came into effect on 17 January. This regulation aims to enhance cybersecurity and resilience among virtual asset service providers (VASPs) in the region.

《数字运营弹性法案》(DORA) 是欧盟 (EU) 内一项新的加密货币法规，于 1 月 17 日生效。该法规旨在增强该地区虚拟资产服务提供商（VASP）的网络安全和弹性。

As part of DORA, financial entities in the EU are now required to maintain a comprehensive register of their contractual arrangements with third-party IT service providers. This measure is designed to ensure safe infrastructure and effective risk management throughout the crypto industry.

作为 DORA 的一部分，欧盟的金融实体现在需要维护其与第三方 IT 服务提供商的合同安排的全面登记。该措施旨在确保整个加密行业的基础设施安全和有效的风险管理。

DORA’s implementation broadens the scope of the EU’s Markets in Crypto-Assets Regulation (MiCA), which is focused on enhancing resilience against potential disruptions from cyberattacks and IT failures. Ultimately, this aims to bolster investor protection and market integrity.

DORA 的实施扩大了欧盟加密资产市场监管 (MiCA) 的范围，该监管的重点是增强抵御网络攻击和 IT 故障潜在干扰的能力。最终，这旨在加强投资者保护和市场诚信。

According to Matt Sullivan, deputy general counsel at MoonPay, DORA will have a significant impact on crypto firms licensed under MiCA. MoonPay, which was recently licensed by the Dutch financial regulator, is ensuring compliance with DORA by adjusting internal policy and procedures, and conducting a thorough review of third-party vendor relationships.

MoonPay 副总法律顾问 Matt Sullivan 表示，DORA 将对 MiCA 许可的加密货币公司产生重大影响。 MoonPay 最近获得了荷兰金融监管机构的许可，通过调整内部政策和程序以及对第三方供应商关系进行彻底审查，确保遵守 DORA。

Mark Jennings, head of Europe at the Gemini crypto exchange, highlighted DORA’s importance in reinforcing the operational resilience of the financial sector against risks related to information and communications technology (ICT). In preparation for DORA, Gemini has implemented a strategic operational resilience framework, which includes a focus on ICT risk management and governance.

Gemini 加密货币交易所欧洲主管 Mark Jennings 强调了 DORA 在增强金融部门抵御信息和通信技术 (ICT) 相关风险的运营弹性方面的重要性。为了准备 DORA，Gemini 实施了战略运营弹性框架，其中重点关注 ICT 风险管理和治理。

Cathy Yoon from Wormhole Foundation pointed out that the impact of DORA extends beyond VASPs, also affecting crypto asset issuers (CASPs) like Circle, the issuer of USD Coin (USDC). While many CASPs have already implemented strong cybersecurity measures, DORA may pose challenges for smaller service providers with limited resources. This could potentially lead to a consolidation of providers in the industry to meet DORA’s stringent security standards.

Wormhole Foundation 的 Cathy Yoon 指出，DORA 的影响不仅限于 VASP，还影响到了美元硬币（USDC）发行人 Circle 等加密资产发行人（CASP）。尽管许多 CASP 已经实施了强有力的网络安全措施，但 DORA 可能会给资源有限的小型服务提供商带来挑战。这可能会导致行业内提供商的整合，以满足 DORA 严格的安全标准。

Finally, Chris Denbigh-White, head of security at Elwood Technologies, noted that the application of DORA underlines the importance of cybersecurity, third-party risk management and incident response protocols. He highlighted a growing focus on operational resilience, with DORA expected to support investor protection and overall market stability.

最后，Elwood Technologies 安全主管 Chris Denbigh-White 指出，DORA 的应用凸显了网络安全、第三方风险管理和事件响应协议的重要性。他强调，人们越来越关注运营弹性，DORA 预计将支持投资者保护和整体市场稳定。