Digital Operational Resilience Act (DORA)
-
25 Minutes -
For all staff
-
EU
This 25-minute course covers the key requirements of the Digital Operational Resilience Act, spanning ICT risk management, incident reporting, resilience testing, third-party risk management and information sharing. It prepares staff to implement and maintain a comprehensive ICT risk management framework and take an active part in risk assessment and mitigation.
DORA replaced a patchwork of national guidance with directly applicable requirements and hard reporting timeframes, and supervisors have been explicit that management bodies carry responsibility for it. The obligations sit with people across technology, procurement, operations and governance. Training all of them is what allows a firm to evidence compliance rather than describe an intention to comply.
-ID.webp?width=800&name=276393187539_1879459860_Digital%20Operational%20Resilience%20Act%20(DORA)-ID.webp)
What you’ll learn in
this course
This course will prepare you to:
- Implement and maintain a comprehensive information and communication technologies (ICT) risk management framework and actively participate in risk assessments and mitigation strategies
- Promptly identify, report and respond to ICT-related incidents
- Participate in regular resilience testing to help assess and improve our defences against cyber threats
- Conduct due diligence on ICT third-party providers, confirm they meet DORA's standards and monitor their performance
- Follow cybersecurity best practices, report suspicious activity and comply with all protocols to protect our ICT systems