DORA

DORA sets a new standard for digital resilience in the financial sector. Learn why it was created, who it applies to, and how proportionality works. You'll leave with a clear understanding of the five pillars that shape this training.

Understand how financial entities are expected to identify, assess, and control ICT risks. See what a structured framework looks like in practice, from asset inventory to protection measures. You'll also learn where management responsibility ends and your own role begins.

Not every ICT incident triggers a reporting obligation. Learn what qualifies as serious under DORA, who is responsible, and within which timeframes your organisation must act. Discover how the reporting route works, from national authority to European level.

Controls on paper offer no guarantee in a real crisis. Discover which testing methods DORA requires, what each one verifies, and when Threat-Led Penetration Testing applies. You'll understand who is involved and what supervisors expect to see.

Outsourcing ICT services doesn't transfer accountability. Learn how DORA approaches third-party risk and which risks deserve the most attention when services are externally provided. You'll also find out how information sharing supports sector-wide resilience.