EY vs KPMG: DORA Compliance Services Compared
Quick verdict: EY ranks higher overall (85/100 vs 84/100) on our methodology, largely on big 4 strengths. Choose KPMG if its focus on banks or its enterprise pricing fits your situation better.
| Criteria | EY | KPMG |
|---|---|---|
| Rating | 4.4 out of 5 | 4.4 out of 5 |
| Overall score | 85/100 | 84/100 |
| Category | Big 4 | Big 4 |
| Headquarters | London, United Kingdom | Amstelveen, Netherlands |
| Founded | 1989 | 1987 |
| Pricing band | Enterprise | Enterprise |
| Gap assessment | Yes | Yes |
| DORA audit | Yes | Yes |
| Consulting | Yes | Yes |
| Resilience / pen testing | Yes | No |
| TPP register | Yes | Yes |
| Entity types served | 4 | 4 |
Where EY is strong
- Strong cyber and technology-risk practice aligned to DORA's ICT pillars
- Wide EU geographic footprint and supervisory experience
- Comprehensive service range across the DORA lifecycle
Where KPMG is strong
- EU-headquartered with a deep regulatory advisory practice
- Broad entity coverage and mature governance frameworks
- Strong offering in regulatory reporting and register management
Which should you choose?
Choose EY if…
- You are a banks.
- You want enterprise-tier engagement economics.
- You prioritise strong cyber and technology-risk practice aligned to dora's ict pillars.
Choose KPMG if…
- You are a banks.
- You want enterprise-tier engagement economics.
- You prioritise eu-headquartered with a deep regulatory advisory practice.
Frequently asked questions
Is EY or KPMG better for DORA compliance?
EY scores higher against our methodology (85/100 vs 84/100), but the right choice depends on your entity type, budget, and which pillars you need most.