DORA for the Management Body
What the Digital Operational Resilience Act asks of the management body of a small financial entity, and what it means for the ICT companies that serve one. Every fact carries its article, so you can check it yourself.
Who this is for
Members of the management body of a small financial entity, such as a payment or e-money institution, an investment firm, a crypto-asset service provider or a crowdfunding service provider. And managers at ICT companies whose customers are financial entities and who now find DORA clauses in their contracts. EU-wide, with German examples where they help.
What you will be able to do
Tell whether DORA binds your company and which regime applies to it, name what the management body approves and cannot hand to IT, tell a major incident from a minor one and know the reporting deadlines, keep a register of information, check an ICT contract against Article 30, and pick your first steps. Structured across 7 modules:
Why is this free?
Article 5(4) DORA asks the members of the management body to keep their knowledge of ICT risk up to date, including by following specific training on a regular basis. What a small entity needs is spread over the Regulation and several technical standards. We read them and wrote down what a management body needs to know, with the article next to each fact.
This course and its certificate stay free, as does the wiki. The NIS 2 walkthrough on nisd2.eu, which guides you step by step through implementation, costs €4,800 net a year; self-hosting on your own servers is a one-time self-host licence.
Start with lesson 0.1
Create a free account and start with the first lesson. Each lesson takes a few minutes and ends with a short quiz.
Start the course