Designing a model for testing the effectiveness of a regulation: The case of DORA for insurance undertakings

Technology is sometimes seen as a disruption that although provides opportunities for growth and development, also provides opportunities for deception, theft, and fraud. On the other hand, automation can make it easier to identify and protect from threats. Hence, a proposal was made by the European Commission to enact a digital operations resilience act. Therefore, our objective in this paper is to lay out the perceived characteristics of effective regulation by using DORA as our case study. We do this by carrying out a literature review and extracting using the thematic analysis approach propositions for these characteristics. Then, we test these using exploratory factor analysis and design a model for perceived effective regulation (PERM). We test the reliability and validity of this model by using the Cronbach alpha. Results show that according to our model, an effective regulation should have four characteristics, specifically "Flexibility and Integration", "Proportionality and Cost", "Reliability and Transparency", and "Relevance and Timeliness". Findings laid out in this paper and PERM can be used to test other proposed regulations to ensure that they are effective before being enacted and also to determine when there is a need for a revamp in specified areas of current regulations and requirements.