Preparing for DORA: How API Intelligence Closes the Regulatory Gap

DORA has been in effect since January 17, 2025, and Article 8 places your API estate at the center of compliance. Join Vedran Cindrić and Harsha Chelle from Treblle as they walk enterprise architects and CISOs through what API intelligence is required to meet DORA's obligations across ICT risk management, incident reporting, third-party risk, and AI agent governance.

Description

DORA has been enforceable since January 17, 2025. Most financial institutions are still working through the operational reality of what it actually demands. Article 8 is the foundation. It requires enterprise architects and security teams to continuously identify, classify, and document every ICT asset and its dependencies. For any banking, insurance, or fintech organization, that requirement lands squarely on the API layer. Without comprehensive API observability, the rest of the DORA framework has nothing solid to build on. Vedran Cindrić, the CEO of Treblle, an Enterprise Runtime Intelligence Platform, and Harsha Chelle who leads the Customer Success team will take enterprise architects and CISOs through the specific requirements organizations need regarding API intelligence to be DORA compliant: * The five DORA pillars and why they matter for your API estate. ICT Risk Management, Incident Management, Resilience Testing, Third-Party Risk, and Intelligence Sharing are designed to function as a system. We'll show where APIs sit within each pillar and what that means for your compliance program. * How APIs qualify as critical financial infrastructure under Article 8. DORA requires continuous identification, classification, and dependency mapping of all ICT assets supporting critical functions. An organization that can't produce a complete API inventory, including shadow APIs and undocumented endpoints, has an Article 8 problem. We'll cover what closing that looks like in practice. * What AI agents mean for your DORA obligations. Financial institutions are already running agents that call internal APIs, third-party APIs, and each other's APIs in multi-agent workflows. That traffic falls under DORA's ICT risk management framework. Most monitoring setups weren't built to cover it. Join us on Tuesday, July 14th at 17:00 GMT+2 to learn how to build a DORA-compliant API posture you can defend when a supervisor comes asking.