Introduction to DORA

Dates

04/09/2026 - 04/10/2026

Location

Online

Level

Introductory online modules, Online training

Delivery mode

Online

Apply

The online course is an introduction to DORA and will be composed of three new pre-recorded videos of about 30/40 minutes each, illustrated with practical use cases. The first part provides an overview of DORA’s background, aims, scope, principles and the general provisions on ICT risk management. The second part examines other general requirements of DORA, focusing on ICT-related incident management, digital operational resilience testing, and key principles in managing ICT third-party risk. The third part addresses some specific requirements of DORA, focusing on incident reporting, the advanced testing of ICT tools, systems and processes, the oversight framework for critical providers, and the rules on information-sharing arrangements.

Introduction and General Requirements of DORA

1.1. Background and aims of DORA
1.2. Scope, definitions and proportionality
1.3. Governance and organization to ensure effective and prudent management of ICT risk
1.4. ICT risk management framework

Other General Requirements of DORA

2.1. ICT-related incident management
2.2. Digital operational resilience testing (general requirements and testing of ICT tools and systems)
2.3. Managing ICT third-party risk (general principles, preliminary assessment and contractual provisions)

Specific Requirements of DORA

3.1. Incident reporting
3.2. TLPT: advanced testing of ICT tools, systems and processes
3.2. Oversight framework of critical ICT third-party service providers
3.3. Information-sharing arrangements

Introduction to DORA

Cookie setting