DORA in Ireland: The Central Bank’s Role
The Central Bank of Ireland is the competent authority for DORA in Ireland. S.I. 20/2025 provides the local supervisory and enforcement arrangements, designates the Central Bank for threat-led penetration testing, and defers DORA’s application to Irish credit unions until 17 January 2028. Occupational pension schemes fall under the Pensions Authority.
For Irish firms, DORA is not an abstract EU regulation — it is supervised locally, and the Irish specifics matter.
The Central Bank as competent authority
The Central Bank of Ireland (CBI) supervises in-scope financial entities for DORA and oversees threat-led penetration testing in Ireland. It has indicated a ‘Day 1 / Day 2’ supervisory approach, expecting firms to have identified gaps and to be closing them — with incident reporting and the register of information singled out for early attention.
S.I. 20/2025
S.I. 20/2025 — the European Union (Digital Operational Resilience) (No. 2) Regulations 2025 — designates the relevant Irish competent authorities and provides supervisory and enforcement arrangements. DORA itself is a directly applicable EU regulation, so it is not ‘transposed’ in the usual sense; the Irish instrument supplies the local framework.
TIBER-IE
Ireland’s threat-led testing runs under TIBER-IE, the local implementation of the ECB’s TIBER framework, with the Central Bank designated for TLPT matters. See TIBER-EU & TIBER-IE explained.
The Pensions Authority carve-out
Institutions for occupational retirement provision (occupational pension schemes) fall under the Pensions Authority, not the Central Bank.
The credit-union deferral
Under S.I. 20/2025, DORA does not apply to Irish credit unions until 17 January 2028, though the Central Bank expects them to prepare. See DORA for Irish credit unions.
Want an Irish-based partner familiar with the Central Bank’s expectations? Talk to CyberLabs.