DORA

Your role in building digital resilience in finance

1

What is the DORA Regulation and why does it matter?

DORA sets a new standard for digital resilience in the financial sector. Learn why it was created, who it applies to, and how proportionality works. You'll leave with a clear understanding of the five pillars that shape this training.

2

ICT Risk Management Framework

Understand how financial entities are expected to identify, assess, and control ICT risks. See what a structured framework looks like in practice, from asset inventory to protection measures. You'll also learn where management responsibility ends and your own role begins.

3

Reporting obligation

Not every ICT incident triggers a reporting obligation. Learn what qualifies as serious under DORA, who is responsible, and within which timeframes your organisation must act. Discover how the reporting route works, from national authority to European level.

4

Digital operational resilience testing

Controls on paper offer no guarantee in a real crisis. Discover which testing methods DORA requires, what each one verifies, and when Threat-Led Penetration Testing applies. You'll understand who is involved and what supervisors expect to see.

5

ICT risks in outsourcing

Outsourcing ICT services doesn't transfer accountability. Learn how DORA approaches third-party risk and which risks deserve the most attention when services are externally provided. You'll also find out how information sharing supports sector-wide resilience.