NIS2 e DORA in vigore. EU AI Act in arrivo — prenota una demo

DORA · Zurich

DORA Compliance in Zurich

Zurich is Switzerland's premier financial center and one of the world's most important banking hubs, home to UBS (which absorbed Credit Suisse in 2023, creating a $5T+ balance sheet), Swiss Re, Zurich Insurance, and Julius Bär. Regulated by FINMA (Swiss Financial Market Supervisory Authority) and the Swiss National Bank, Zurich's financial institutions manage CHF 7.9 trillion in assets. The city has also emerged as a global hub for crypto and decentralized finance, with over 1,100 blockchain companies in the broader 'Crypto Valley' ecosystem.

250+
Banks in Zurich
CHF 7.9T
Assets under management
45,000+
Finance employees
1,100+
Crypto & blockchain companies

Context

Why DORA matters in Zurich

The Digital Operational Resilience Act (DORA) requires financial entities to implement comprehensive ICT risk management frameworks, including incident reporting, resilience testing, and third-party oversight. Mandatory since January 17, 2025, it applies to over 22,000 financial entities across the EU.

After the forced merger of UBS and Credit Suisse, Zurich faces unprecedented compliance challenges as the combined entity integrates risk frameworks across two global banks. FINMA has significantly tightened supervisory expectations around operational resilience and ICT risk management. While Switzerland is not an EU member, Swiss financial institutions serving EU clients must comply with DORA, GDPR, and other EU regulations — creating a dual compliance burden. The booming crypto sector faces additional oversight under Switzerland's progressive DLT Act alongside EU's MiCA requirements for cross-border operations.

Supervisory Bodies

FINMA, Swiss National Bank (SNB)

Key Industries

  • Banking & Wealth Management
  • Insurance & Reinsurance
  • Asset Management
  • Crypto & DeFi

Notable financial institutions in Zurich

UBSSwiss ReZurich InsuranceJulius BärPartners GroupSygnumCredit Suisse (now UBS)Swiss Life

Requirements

DORA Key Requirements

ICT risk management framework (Art. 5-16)
Major incident reporting to BaFin within 4 hours (Art. 17-23)
Threat-led penetration testing / TLPT every 3 years (Art. 24-27)
Register of all ICT third-party providers (Art. 28-44)
Cyber threat information sharing (Art. 45)
ICT business continuity and disaster recovery plans

Terms

Related Compliance Terms

Resources

Related Resources

DORA Framework Overview

Everything about DORA and how Matproof helps you comply.

DORA Articles & Guides

Latest articles and guides on DORA compliance.

Compliance Glossary

All key compliance terms explained — from DORA to TLPT.

Local Partners

Find Matproof partners for compliance consulting in Zurich.

Get started

DORA-ready in weeks, not months.

Matproof automates DORA compliance for organisations in Zurich. Audit-ready faster, with EU data residency.

Request a demoSee DORA details →