Understanding the Digital Operational Resilience Act

Course outline and objectives

There is not much time left for a great many EU firms of various types to manage operational resilience for Information and Communications Technology (ICT) in accordance with the requirements of the Digital Operational Resilience Act (DORA). From January 2025 in scope firms must follow the rules for protection, detection, containment, recovery and repair capabilities against ICT-related incidents.

DORA covers ICT risk and sets rules on ICT risk-management, incident reporting, operational resilience testing and ICT third-party monitoring. ICT incidents and a lack of operational resilience can jeopardise the safety and soundness of firms and the entire financial system.

Attending will help you to understand the requirements of the Digital Operational Resilience Act and develop the tools and techniques needed to ensure compliance with the regulations, including:

• The main requirements
• Roles and responsibilities
• ICT risk management frameworks
• Incident management

Who will benefit?

This course will benefit all those involved in all aspects of the ICT management, operational resilience, third-party risk management, non-financial risk specialists and auditors.

Topics may include, but are not limited to:

• An introduction to the Digital Operational Resilience Act
• Governance Expectations
• ICT risk management framework
• Digital Operational Resilience testing
• The role of competent authorities