Azul Delivers Comprehensive Java Solutions to Support Financial Institutions in Meeting DORA Compliance Requirements

Azul, the only company 100% focused on Java, has announced that the integrated risk management practices for its OpenJDK solutions fully support the stability, resilience and integrity requirements in meeting the European Union’s Digital Operational Resilience Act (DORA) provisions. With the upcoming DORA enforcement deadline of January 17, 2025, quickly approaching, thousands of EU financial organisations and companies around the world with business in the EU must act quickly to ensure their IT infrastructure meets stringent new operational resilience standards that potentially require significant time investments to fulfill.

DORA’s primary goal is to enhance the digital resilience of financial entities, mitigate risks associated with Information and Communications Technology (ICT) risks and ensure that financial entities can withstand, respond to, and recover from all types of ICT-related disruption.This includes risks from ICT service providers that deliver digital and data services through ICT systems to internal or external users; it also includes hardware services and technical support via software updates. Java is the programming language of choice for the Financial Services industry. According to the 2022 FINOS State of Open Source in Financial Services report, 51% of the code within the financial services data set is written in Java.

Navigating the Complexities of Digital Operational Resilience

Azul’s comprehensive long-term support (LTS) Java versions ensure stability and ongoing security updates – including updates for older Java versions like versions 6 and 7— crucial for maintaining operational resilience under regulatory scrutiny. The company’s security features, comprehensive testing and compatibility with modern architectures and cloud environments provide a secure and scalable Java platform. With a proven track record in stability, reliability, and security, Azul’s Java solutions help customers meet the requirements of DORA.

The DORA regulation represents a significant shift in how financial institutions must approach their digital operational resilience, with non-compliance resulting in corporate fines of up to 2% of annual turnover and potential fines for individuals up to €1,000,000. This extensive regulation affects not only EU financial entities but also global organisations with EU operations or business relationships and third-party service providers.

Azul’s DORA Assessment Results

According to Crucyble, the information security consulting firm that evaluated and assessed Azul’s DORA-related risk management practices: “Azul has made considerable efforts to comply with the Digital Operational Resilience Act (DORA) EU by implementing a robust governance framework, risk management protocols, incident response capabilities, and third-party risk management strategies. Through continuous monitoring, regular testing, including penetration tests, and comprehensive plans for ICT resilience and recovery, Azul demonstrates a strong commitment to ensuring operational continuity and resilience.

“The company is actively addressing the requirements of DORA EU to support its financial customers in maintaining operational integrity and security. Azul’s proactive stance ensures it is well-equipped to meet the evolving challenges of ICT risk management and digital operational resilience, reinforcing its readiness to support customers in complying with the DORA EU framework.”

Azul’s offering includes:

DORA Compliance Considerations for Use of Java Apps and Java-based Infrastructure

To support financial entities in their DORA compliance efforts for the use of Java applications and Java-based infrastructure, Azul has outlined five essential steps:

“As a trusted partner to our customers, we understand the complex challenges financial institutions face in meeting these stringent requirements,” said James Johnston, vice president of EMEA at Azul. “With Java powering most critical financial systems, unsupported or vulnerable Java infrastructure puts DORA compliance at risk. Our solutions enable companies to accelerate their compliance efforts while reducing costs and complexity—critical factors given the rapidly approaching deadline.”

Companies interested in learning more about how Azul supports DORA compliance for their Java applications and Java-based infrastructure should read Azul’s DORA FAQs or talk to a Java application and infrastructure expert at Azul.

See more stories here.