Banking cloud-native a 2026 yana cikin matakin binciken DORA. Dokar (EU) 2022/2554 ⧉ ta fara aiki tun 17 ga Janairu 2025. Tsarin keɓe critical third-party provider (CTPP) ƙarƙashin Mataki na 28-44 yana buɗewa tsawon 2025-2026, tare da AWS, Microsoft (Azure), Google (GCP), da Salesforce kusa ko cikin iyakar keɓancewar. Hukumomin Gudanarwa na Turai (EBA, EIOPA, ESMA) sun buga RTS da ITS na ƙarshe kan Rajistar Bayanai ⧉ a 2024. Ƙungiyar Gudanar da Banki ta ECB tana da bayyananniyar shirye-shirye kan shirin saurin tashe-tashen cloud da gwajin shiga ƙarƙashin barazana a cikin fifikon gudanarwa na 2026-28 ⧉. Tambayar cibiyar ba ko a daidaita dabarar cloud da DORA ba ce — wannan an daidaita ta — sai dai ko primitives na platform engineering na cibiyar suna samar da shaida a saurin bututun turawa maimakon a cikin PDF da aka tara mako kafin gwajin.
Taƙaitaccen Manaja / Manyan Abubuwan da za a Ɗauka
- Juriyar cloud ta DORA na cikin tsananin tilastawa tun 17 ga Janairu 2025. Mataki 6, 8, 18, 26 da 28-44 duka suna aiki. Binciken gudanarwa daga raƙumin gwaji na farko ya sauka a Q4 2025. Tsarin "shirye-shirye" ya tsufa da zagayowar biyu.
- Tsarin keɓe CTPP yana buɗewa. AWS, Microsoft, Google, Salesforce — kusa ko ciki. Keɓancewa yana ba ESAs hakkokin kulawa kai tsaye ciki har da buƙatun bayanai, dubawar wurin, da shawarwarin gudanarwa.
- Platform engineering shine abin tsarawa. Hanyoyin shimfiɗa na Kubernetes (EKS / AKS / GKE / OpenShift), tashar masu haɓakawa irin ta Backstage, GitOps (ArgoCD ko Flux), Open Policy Agent a shigarwa, OpenTelemetry daga ƙarshe zuwa ƙarshe. Primitives biyar masu suna; duk abin da ya ɓace bincike ne.
- An yi sovereign cloud da injiniya, ba alama ba. AWS European Sovereign Cloud, Microsoft EU Data Boundary, Bleu (Capgemini + Orange + Microsoft), Thales / S3NS, Oracle EU Sovereign Cloud — kowace tana magance takamaiman ɓangaren Schrems II + DORA Mataki 28; babu wani da ke amsa cikakke.
- Ana buƙatar shaidar fita da aka gwada. EBA/GL/2019/02 sakin layi na 81 da 113-117. Tebur na kwata-kwata bai isa ba; masu kulawa suna sa ran gwajin aiwatar da fita na shekara-shekara daga ƙarshe zuwa ƙarshe ga kowane aiki mai mahimmanci ko muhimmi.
- RTO / RPO daga jerin sunayen CIF. Mataki 1: awa 2 / mintuna 15. Mataki 2: awa 4 / awa 1. Mataki 3: awa 24 / awa 4. An samo daga binciken tasirin kasuwanci, ba ƙarfin ƙungiyar dandalin ba.
Me Yasa Juriyar Cloud ta DORA Take cikin Matakin Bincike #
Dalilai uku da suka sa tsarin "shirye-shirye" bai dace a 2026 ba.
Na farko, lokaci. An buga DORA a Disamba 2022. Lokacin amfani na watanni 24 ya rufe a 17 ga Janairu 2025. RTS da ITS na ƙarshe na ESAs — gami da ITS kan Rajistar Bayanai da ake amfani da shi don keɓe CTPP — an buga tsawon 2024. Raƙumin gwajin gudanarwa na farko ya gudana tsawon 2025; binciken kan cikar tsarin gudanar da haɗarin ICT na Mataki 6 da daidaita rajistar Mataki 8 sun sauka a Q4 2025 a cibiyoyi da yawa na tier-1.
Na biyu, tsarin keɓe CTPP. Mataki 31 ya kafa ma'aunin keɓe a matsayin critical third-party provider: tasirin tsarin idan ya kasa, mahimmancin sabis ɗin da aka bayar, girma da rikitarwar sabis, maye gurbinsa. ESAs suna kula da rajista kuma suna buga shawarwarin keɓe. AWS, Microsoft (Azure), Google (GCP), da Salesforce suna kusa ko cikin iyakar keɓancewar, dangane da rabon kasuwa na sabis na kuɗi a kowace ƙasar mamba. Keɓancewa yana ba babban mai kulawa (ɗayan ESAs, an raba shi ga kowane mai bayarwa) ikon kulawa kai tsaye: buƙatun bayanai ƙarƙashin Mataki 37, dubawar wurin ƙarƙashin Mataki 38, shawarwari ƙarƙashin Mataki 35, da tsarin bayyana jama'a ƙarƙashin Mataki 41. Bankuna da aka kula da su a kan waɗannan CTPP suna ƙarƙashin sa ran gudanarwa daidai kan yadda suke gudanar da wannan dogaron da aka keɓe.
Na uku, fifikon gudanarwa na ECB na 2026-28. Takardar fifiko tana ambaton bayyananniyar shirye-shirye biyu da ke shafar banking cloud-native kai tsaye: shirin saurin manyan tashe-tashen sabis na cloud (saɓanin gudanarwar da aka tsara yana gwada ikon cibiyar don ɗaukar dadewar fitar CTPP da aka keɓe) da TLPT da aka daidaita da TIBER-EU (kowane motsa jiki na TIBER-EU yana ƙayyade ayyukan mahimmanci da muhimmai na cibiyar, waɗanda yanzu sun haɗa da sabis ɗin da aka kashe a kan cloud na jama'a). Raƙumin gwaji na 2026 zai samar da bincike kan duka biyu.
Tsarin na 2026 ba "DORA ya zo" ba ne; "binciken gwajin DORA suna isa akwatin gidan waya na cibiyar ku, kuma shawarwarin platform engineering da kuka ɗauka tsawon 2024-2025 su ne abin da mai kulawa yake bincika a cikin waɗannan binciken."
Tsarin Ma'auni na 2026 #
| Matakin Ma'auni | Yadda "Shirye" Yake | Ma'aunin Shirye-shirye | Yanayin Kasawa |
|---|---|---|---|
| Balagar dandalin | >80% na ayyuka kan dandalin Kubernetes na hanyar shimfiɗa (EKS / AKS / GKE / OpenShift) tare da shigarwar policy-as-code, turawar GitOps, gwajin DR mai sarrafa kansa | % na CIF kan dandalin hanyar shimfiɗa; lambar turawar inuwa; matsakaicin lokacin shigar da sabon sabis a kan dandalin | Dandulan inuwa tare da sarrafawa marasa daidaituwa; CIF da ke gudana akan kayan aikin da ba a shimfiɗa ba waɗanda ba a iya ganinsu ga daidaita rajistar Mataki 8 |
| Cikar rajistar Mataki 8 | Rajistar Bayanai tana daidaitawa kai tsaye da amfani da API na ɓangare na uku na dandalin + cloud-bill-of-materials; rarrabawar mahimmanci ta dace da jerin sunayen CIF na cibiyar | % shigarwar rajistar da aka daidaita da telemetry na dandalin; lambar shigarwar marayu; binciken cikar iyakar CTPP | ESAs sun gano dogaron CTPP da aka keɓe wanda cibiyar ta kasa bayyanawa ƙarƙashin Mataki 8; binciken mutum da sakamakon iyakar CTPP |
| Tarin cloud | An tsara ayyuka masu mahimmanci ga masu samar da cloud DA yankuna na sub-cloud DA sabis DA tantance maye gurbinsa; an ƙididdige fallasawar haɗin gwiwa ta cross-CIF | Maki na tari kowane CIF; fallasawar haɗin gwiwa tsakanin CIF da ke raba yankin CTPP da aka keɓe | Tashe-tashen IAM ɗaya na AWS us-east-1 yana fasa CIF huɗu da cibiyar ta yi tunanin sun samu kayan aiki da kansu |
| Ƙarfin fita da aka gwada | Gwajin aiwatar da fita na shekara-shekara daga ƙarshe zuwa ƙarshe ga kowane CIF mai dogaro da CTPP da aka keɓe; RTO / RPO da aka rubuta sun cika manufofin BIA; an gwada hanyar ɗaukar bayanai | Adadin gwajin nasara kowane CIF; matsakaicin lokacin aiwatar da fita vs manufar RTO; jinkirin hanyar ɗaukar bayanai | Shirin fita wanda ke wanzu kawai a matsayin PDF; tebur ya ce 4h RTO, gwajin gaske yana nuna 48h a yunkuri na farko |
| Lura + rahoton lamari | Hanyoyin OpenTelemetry daga ƙarshe zuwa ƙarshe a cikin sabis; mai taimakon rarrabawa na sa'o'i 4 na Mataki 18 mai sarrafa kai an haɗa shi da dandalin gudanar da lamari | % zirga-zirgar CIF da hanyoyin OTel suka rufe; matsakaicin lokacin daga gano lamari zuwa shawarar rarrabawa ta Mataki 18 | An rarraba babban lamari a waje da taga na sa'o'i 4 saboda tantance mahimmanci yana buƙatar tarurrukan triage; binciken Mataki 18 |
| Haɗin TLPT | Iyakar TLPT an samo ta daga jerin sunayen CIF kuma ana sabunta ta a kowane lokaci; binciken yana komawa zuwa policy-as-code na dandalin; binciken da aka rufe yana samar da fakitin shaidar shirye don gudanarwa | Adadin rufe binciken TLPT; lokacin zagaye daga bincike zuwa sabunta manufa | TLPT ya gano rauni wanda ƙungiyar platform engineering ta cibiyar ba za ta iya gyara a cikin zagayen turawa biyu ba |
Sakonni na Yanzu da za a Bibiya #
| Sako | Abin da ke Nufi ga Bankuna | Tushe |
|---|---|---|
| DORA na tsananin tilastawa tun 17 Jan 2025 | Binciken gudanarwa na raƙumin farko ya sauka Q4 2025; ana sa ran binciken raƙumin biyu tsawon 2026 H2 | EUR-Lex ⧉ |
| Keɓe CTPP yana buɗewa tsawon 2025-2026 | AWS, Microsoft, Google, Salesforce kusa ko cikin iyakar; keɓancewa yana ba ESAs hakkokin kulawa kai tsaye | EBA ⧉ |
| Fifikon gudanarwa na ECB 2026-28 sun ambata tashe-tashen cloud a fili | Saɓanin gudanarwar da aka tsara yana gwada ikon ɗaukar dadewar fitar CTPP da aka keɓe | Gudanar da Banki na ECB ⧉ |
| TIBER-EU an daidaita da DORA Mataki 26 | Iyakar TLPT tana rufe ayyukan mahimmanci / muhimmai ciki har da sabis ɗin da aka kashe a cloud | ECB TIBER-EU ⧉ |
| Jagororin outsourcing na EBA (EBA/GL/2019/02) suna haɗawa da DORA Mataki 28 | Kasancewar gaske (¶64), tantance maye gurbinsa (¶81), dabarar fita (¶113-117) — sakin layi da masu kulawa ke gwadawa | EBA ⧉ |
| Tsarin Sabis na Cloud na EU (EUCS) na ci gaba | Tsarin takardar shaidar sovereign-cloud na gaba ƙarƙashin Dokar Tsaron Yanar Gizo na EU; daftari da ENISA ta buga | ENISA EUCS ⧉ |
Platform Engineering: Primitives Biyar Masu Suna #
Balagar cloud-native a 2026 ta ragu zuwa primitives biyar na injiniya da suka haɗu don samar da shaidar gudanarwa a saurin bututun turawa. Rashin kowane ɗaya bincike ne da yake jiran faruwa.
1. Hanyoyin Shimfiɗa na Kubernetes #
Kowane CIF yana gudana akan dandalin Kubernetes da aka gudanar — EKS, AKS, GKE, ko OpenShift akan CTPP da aka keɓe, ko madadin da mai siyarwa yake gudanarwa. Ƙungiyar dandalin tana aiki da tsarin golden cluster guda ɗaya tare da karkacewar da aka sarrafa: nodes daga base image da aka rubuta; ware namespace-per-team; profile na pod-security-standards-restricted; manufofin sadarwa; allurar service-mesh (Istio ko Linkerd) don tabbatar da inter-service da lura. Sababbin sabis suna shiga hanyar shimfiɗa ta hanyar templated onboarding workflow wanda ke samar da shigarwar rajistar Mataki 8 a matsayin kayan turawa.
2. Tashar Masu Haɓakawa Irin ta Backstage #
Tashar tsakiya ta masu haɓakawa — Backstage ⧉ na open-source na Spotify ita ce aiwatar da tunani, tare da madadin kasuwanci daban-daban — tana samar da tsarin rikodi na abin da ke gudana inda. Catalogue yana lissafa kowane sabis, mai shi, dogaro, rarrabawar mahimmanci, runbook, juyawar on-call. Tashar tana haɗawa da rajistar Mataki 8: kowane shigarwar catalogue yana tsara shi zuwa shigarwar rajista; shigarwar da ba ta da nassoshin rajista suna haifar da gazawar CI; shigarwar rajista ba tare da kasancewar catalogue ba suna haifar da gargaɗin riga-kafi-mai-kulawa.
3. Turawar GitOps ta ArgoCD ko Flux #
Turawar samarwa tana gudana ta GitOps controller — ArgoCD ko Flux shine ma'aunin samarwa a 2026 — wanda ke daidaita yanayin Git-versioned declarative zuwa cluster da ke gudana. An kashe kubectl apply na hannu; hanya kawai zuwa samarwa ita ce pull request da aka haɗa. Ma'ajiyar Git ita ce audit log; masu kulawa da ke tambaya "nuna mini sanyin sabis X a ranar Y" suna samun Git tag, ba screenshot ba.
4. Open Policy Agent a Shigarwa #
Open Policy Agent (OPA) yana zaune a sarkar shigarwar cluster yana aiwatar da manufar dandalin: bin sa hannun pod-security profile, asalin image, iyaka na albarkatun, kasancewar manufar sadarwa, kwafin da ya dace da matakin mahimmanci, sanya sub-region ƙarƙashin guardrails na sovereign-cloud. An sarrafa manufofin a Git kuma ana sarrafa canjinsu tare da sanyin sabis. Turawa da aka ƙi suna samar da dalilai masu duba waɗanda ke ciyar da fakitin shaidar gudanar da canji.
5. OpenTelemetry Daga Ƙarshe zuwa Ƙarshe #
Kowane sabis yana fitar da hanyoyin OpenTelemetry, ma'aunai, da logs. Ƙungiyar dandalin tana aiki da bututun lura na tsakiya — yawanci Tempo ko Jaeger don hanyoyi, Prometheus don ma'aunai, Loki ko OpenSearch don logs — wanda ke nuna lafiyar CIF daga ƙarshe zuwa ƙarshe, taswirar dogaro, da abubuwan shigarwar rarrabawar lamari. Taga rarrabawar sa'o'i 4 na Mataki 18 yana farawa da ganowa; bututun OTel yana taƙaita hanya daga ganowa zuwa rarrabawa zuwa neman da za a iya tambaya, ba tarurrukan triage ba.
Sovereign Cloud a Matsayin Injiniya, Ba Alama Ba #
Dabarar sovereign-cloud a 2026 dole ne ta amsa takamaiman tambayoyi huɗu na outsourcing na Schrems II + DORA + EBA:
- Ina ake sarrafa bayanan kuma a adana su? Wurin ƙasar mamba ta EU; sub-region don zirga-zirgar mahimmanci; alkawarin zama na bayanai a rubuce.
- Wa yake da damar shari'a ga bayanan? Ayyukan ma'aikatan gida-kawai; buƙatun samun damar gwamnatin waje suna ƙarƙashin tsarin kotun gida; amsar da aka gwada ga buƙatun samun damar bisa doka.
- Menene bayanin maye gurbinsa? Tantance maye gurbinsa na EBA/GL/2019/02 ¶81; aiwatar da fita da aka gwada; an gano madadin mai bayarwa kuma an yi kwangila (ko a rubuce a kan dalilin da yasa bai dace ba).
- Menene tsarin sovereignty na fasaha? Maɓallai da abokin ciniki ke sarrafawa; rabuwar cryptographic; sovereign management plane; auditable supply chain.
Zaɓuɓɓukan mai siyarwa na 2026 da ke magance waɗannan tambayoyin:
- AWS European Sovereign Cloud (an sanar 2023, ana sa ran GA H2 2026): yankin jiki da reshen AWS na mazaunin EU ke gudanarwa; ayyukan mazaunin EU da tallafi; maɓallai da abokin ciniki ke sarrafawa ta tsarin KMS-XKS. Yana jiran daidaita abubuwan kwangila na DORA Mataki 28 a 2026.
- Microsoft EU Data Boundary (GA 2024) + Bleu (Capgemini + Orange + Microsoft, Faransa kawai): Data Boundary yana ajiye bayanan abokin ciniki na EU a yankunan EU; Bleu shine sovereign cloud na Faransa da aka daidaita da SecNumCloud wanda ke gudanar da Microsoft Azure stack ƙarƙashin ikon aiki na Faransa.
- Haɗin gwiwar sovereign na Google Cloud: Thales / S3NS a Faransa (daidai da Bleu); T-Systems a Jamus.
- Oracle EU Sovereign Cloud (GA 2023): tsarin yanki biyu (Frankfurt + Madrid) tare da ayyukan mazaunin EU; cikakke ya bi Schrems II.
- Masu bayarwa da aka daidaita da Gaia-X (OVHcloud, Scaleway, Stackit, Aruba Cloud, IONOS): masu bayarwa na asalin EU tare da alamar Gaia-X; ƙaramin girma da yanayin ƙasa fiye da hyperscalers amma babu fallasawar Foreign Intelligence Surveillance Act.
Shawarar dabara ba kasafai ake yi ɗaya ko biyu ba. Bankunan tier-1 yawanci suna gudanar da sanyin hyperscaler-tare-da-Data-Boundary don yawan ayyuka, zaɓin sovereign-cloud don zirga-zirgar da aka keɓe na babbar hankali (misali AML / sanctions case-management da ke ɗaukar bayanan sirri na mazaunin EU), da hanyar maye-gurbinsa-tabbatuwa da ake gwadawa shekara-shekara ƙarƙashin DORA Mataki 28.
Aiwatar da Fita da aka Gwada #
EBA/GL/2019/02 ⧉ sakin layi na 113-117 su ne tanade-tanaden dabarar fita. Rubutun a bayyane yake game da abin da ake buƙata: "Cibiyoyi da cibiyoyin biyan kuɗi ya kamata su tabbatar da cewa za su iya fita daga shirye-shiryen outsourcing ba tare da rushewa marar dacewa ga ayyukan kasuwancinsu… Hakanan ya kamata a rubuta dabarun fita kuma a gwada su a matsayin sashe na sabunta-sabuntar shirye-shiryen outsourcing."
Sa ran gudanarwa a 2026 shine gwajin aiwatar da fita na shekara-shekara daga ƙarshe zuwa ƙarshe ga kowane CIF mai dogaro da CTPP da aka keɓe. Motsa jiki na tebur da bita na takarda ba su isa ba. Gwajin dole ne ya samar da:
- Ma'aunin Lokaci-zuwa-dawowa: ainihin lokacin da ya wuce daga sanarwar fita zuwa dawo da aiki akan madadin mai bayarwa, bisa manufar RTO da aka samo daga BIA.
- Shaidar ɗaukar bayanai: fitar da bayanai da aka gwada daga firamare, an tabbatar da ita bisa hanyar shigowa ta mai bayarwa, tare da shaidar daidaitawa.
- Daidaiton aiki: aikin da aka gwada yana gudana akan madadin mai bayarwa tare da SLO daidai.
- Shaidar farashi: rubutaccen farashin aiwatar da fita vs zato na farashin dawowa a cikin shirin haɗari na cibiyar.
Yunkuri na farko na gwajin fita daga ƙarshe zuwa ƙarshe na CIF yawanci yana bayyana giɓi na 5-10× tsakanin RTO da aka rubuta da ainihin RTO. Rufe waccan giɓin aikin injiniya ne wanda yake ɗaukar watanni. Bankunan da suka gano shi yayin dubawar gudanarwa maimakon yayin zagayowar gwajin shekara-shekara nasu suna fuskantar zagayowar binciken Q3 da za su iya kauce wa.
Manufofin RTO / RPO daga Jerin Sunayen CIF #
Kowane aiki mai mahimmanci ko muhimmi yana taswirewa zuwa rarrabawar matsayi da aka samo daga binciken tasirin kasuwanci na cibiyar. Matsayin yana tafiyar da manufofin RTO da RPO waɗanda ƙungiyar platform engineering ke amincewa za ta bayar.
| Matsayi | Misalai | RTO | RPO |
|---|---|---|---|
| Matsayi 1 (mai mahimmanci-mai mahimmanci) | Haɗin RTGS (CHAPS / T2 / Fedwire), izinin biyan kuɗi na dillali, tabbatar da abokin ciniki don tashoshin dijital | sa'o'i 2 | mintuna 15 |
| Matsayi 2 (mai mahimmanci) | AML / sanctions screening, bututun gano zamba, izinin ATM, sarrafa biyan kuɗi na batch | sa'o'i 4 | sa'a 1 |
| Matsayi 3 (muhimmi) | Rahoto da gabatarwar tsari, tushen ilimin abokin ciniki, dandulan haɗin gwiwa na ciki | sa'o'i 24 | sa'o'i 4 |
| Matsayi 4 (ba mai mahimmanci ba) | Tsarin HR na ciki, kayan aikin tallace-tallace, rahoton da ba na abokin ciniki ba | sa'o'i 72 | sa'o'i 24 |
Waɗannan lambobi misali ne — BIA na cibiyar yana samar da nasu. Abin da platform engineering ke bayarwa shine ƙarfin da aka gwada na regression don cika manufofin da aka samo daga BIA, an shaida ta gwajin DR mai sarrafa kansa kowane sabis kuma an tabbatar da shi ta gwajin aiwatar da fita na shekara-shekara ga CIF masu dogaro da CTPP.
Abin da Wannan ke Nufi Bisa Nau'in Banki #
Banks na Tsarin Tsari na Duniya #
Matsalar mai wahala ita ce girma a kan layukan kasuwanci: dubban sabis, daruruwan CIF, fallasawar CTPP da aka keɓe da yawa a kan kayayyaki, hukunce-hukunce da bayanin juriya. Saka hannun jari shine ƙarfin platform engineering na tsakiya — hanyoyin shimfiɗa na Kubernetes, tashar Backstage, GitOps, OPA, OTel — wanda ke samar da daidaita rajistar Mataki 8, taswirar tarin CTPP, da ƙarfin aiwatar da fita CIF-bisa-CIF ba tare da gini na musamman a kowane layin kasuwanci ba.
Bankuna na Duniya da na Matsakaici #
Ana ba da hujjar saka hannun jarin platform engineering a wannan matsayi amma iyakar ƙanƙanci ne: zaɓi CIF biyu ko uku na mafi girman mahimmanci, gina tsarin hanyar shimfiɗa a kewayensu, yarda gandun gargajiya ya ci gaba akan sarrafawa da ake da su na matsakaicin lokaci. Matsayin gudanarwa ya fi mahimmanci fiye da fadin dandalin — iya shaida cikar rajistar DORA Mataki 8 da fita da aka gwada ga manyan CIF uku yana rufe damuwar farko na mai kulawa.
Bankunan Yanki da Ƙanana #
Zaɓin mai siyarwa fiye da gina ciki. Zaɓi mai siyarwar dandalin banki wanda gininsa na Kubernetes-native an rubuta, wanda haɗin rajistar Mataki 8 na DORA aka gina shi, kuma wanda alkawura na abubuwan kwangila na DORA Mataki 28 a bayyane suke. Ƙarfin injiniya na ciki yana kewaye da sanyi, sa ido, da amsar lamari — ba ginin dandalin ba.
Fintechs, PSPs, da Masu Bayar da SaaS da ke Hidima ga Bankuna #
Tambayar samfur ga masu siyarwa da ke siyarwa zuwa bankunan EU a 2026 ita ce ko dandalin ya samar da shigarwar rajistar Mataki 8 da abubuwan kwangila na DORA Mataki 28 da aikin yarda da bankin ke buƙata. Masu siyarwa da abubuwan da aka tsara suna cin kasuwannin kasuwanci; masu siyarwa da samfuran PDF suna asarar ga masu fafatawa da JSON da aka tsara.
Ƙarshe #
Juriyar cloud ta DORA na cikin matakin bincike. Shawarwarin platform engineering da aka ɗauka tsawon 2024-2025 su ne abin da zagayowar gudanarwa ta 2026 take bincika. Cibiyoyin da suke da kamala ga ECB da EBA a 2026-2028 su ne waɗanda ke gudanar da hanyoyin shimfiɗa na Kubernetes tare da tashoshi irin na Backstage da turawar GitOps ƙarƙashin shigarwar Open Policy Agent tare da OpenTelemetry daga ƙarshe zuwa ƙarshe — suna samar da shaidar rajistar Mataki 8 a matsayin kayan turawa da shaidar aiwatar da fita da aka gwada a matsayin zagayowar shekara-shekara, ba amsar buƙatar gudanarwa ba.
Cibiyoyin da ba su yi waɗannan saka hannun jari ba za su gano ko ƙungiyar yarda ta layi na biyu nasu za ta iya ɗaukar zagaye na farko na binciken gudanarwa kafin zagaye na biyu ya iso.
Auna dandalin kamar yadda kuke auna kowane shirin aiki: rufin hanyar shimfiɗa, ƙimar daidaita rajista, makin tarin CTPP, lokacin fita da aka gwada vs manufar RTO, matsakaicin lokacin rarrabawar Mataki 18, ƙimar rufe TLPT. Shaida a saurin bututun aiki; kwalin takardun kawai lokacin da mai kulawa ya nemi ɗaya.
Tambayoyin da Ake Yawan Yi #
Shin juriyar cloud ta DORA tana cikin matakin shirye-shirye a 2026?
A'a. DORA na cikin tsananin tilastawa tun 17 ga Janairu 2025. Tsarin keɓe CTPP ƙarƙashin Mataki na 28-44 yana buɗewa tsawon 2025-2026. Binciken gwajin ECB kan tsarin gudanar da haɗarin ICT na Mataki 6 da cikar rajistar Mataki 8 sun sauka a cibiyoyi da yawa na tier-1 a Q4 2025. Tambayar gudanarwa ta 2026 ita ce shaidar gwaji ta musamman ga cibiya, ba shirin tsari ba.
Wadanne masu samar da cloud ne aka keɓe a matsayin CTPP?
ESAs suna buga shawarwarin keɓe akan gidajen yanar gizo nasu. Cibiyoyin da ke kusa ko cikin iyakar a 2026 sun haɗa da AWS, Microsoft (Azure), Google (GCP), Salesforce, da ƙananan adadi na wasu dangane da rabon kasuwa na sabis na kuɗi a kowace ƙasar mamba. Bankuna da aka kula da su a kan waɗannan masu bayarwa suna fuskantar sa ran gudanarwa daidai kan yadda suke gudanar da wannan dogaron.
Shin sovereign cloud yana kawar da buƙatar abubuwan kwangila na DORA Mataki 28?
A'a. Sovereign cloud yana magance ɓangaren Schrems II + zama na bayanai; abubuwan kwangila na DORA Mataki 28 sun zama wani alƙawari daban wanda ya shafi inda bayanan suke. Kwangilar mai bayarwa na sovereign-cloud dole ne ta rufe samun damar bayanai, tsaro, zama, hakkin audit, dabarun fita, da ci gaba bisa Mataki 28.
Menene abin da injiniya ya bayar wanda ke nuna juriyar cloud ta DORA?
Primitives biyar na platform engineering suna haɗawa: hanyoyin shimfiɗa na Kubernetes (cluster da aka gudanar tare da karkacewa da manufar ta sarrafa), tashar masu haɓakawa irin ta Backstage (catalogue da ke daidaitawa zuwa rajistar Mataki 8), turawar GitOps (ArgoCD ko Flux), Open Policy Agent a shigarwa, OpenTelemetry daga ƙarshe zuwa ƙarshe. Shaida a saurin bututun aiki maimakon a lokacin gwaji.
Sau nawa ake buƙatar gwada aiwatar da fita?
Gwajin aiwatar da fita na shekara-shekara daga ƙarshe zuwa ƙarshe kowane CIF mai dogaro da CTPP da aka keɓe. Motsa jiki na tebur da bita na takarda ba su isa ba. Gwajin dole ne ya samar da lokaci-zuwa-dawowa, shaidar ɗaukar bayanai, daidaiton aiki, da shaidar farashi — ana auna su bisa manufofin RTO da RPO da aka samo daga BIA.
Tushe #
- European Union, (2022). Dokar (EU) 2022/2554 — Dokar Juriya na Dijital na Aiki (DORA) ⧉.
- European Banking Authority, (2019). EBA/GL/2019/02 — Jagororin kan shirye-shiryen outsourcing ⧉.
- European Banking Authority, (2026). Dokar Juriya na Dijital na Aiki ⧉.
- European Supervisory Authorities, (2024). Rahoto na Ƙarshe akan ITS na Rajistar Bayanai ƙarƙashin DORA ⧉.
- ECB Banking Supervision, (2025). Fifikon gudanarwa 2026-28 ⧉.
- European Central Bank, (2024). Tsarin TIBER-EU ⧉.
- ENISA, (2024). Tsarin Tsaron Yanar Gizo na EU don Sabis na Cloud (EUCS) ⧉.
- Spotify, (2020-2024). Tashar masu haɓakawa Backstage ⧉.
- Cloud Native Computing Foundation, (2018). Open Policy Agent (OPA) ⧉.
- Cloud Native Computing Foundation, (2019). OpenTelemetry ⧉.
Bita ta ƙarshe .
Bita ta ƙarshe .