Opleiding: Foundation DORA

A practical introduction to the EU's Digital Operational Resilience Act (DORA), designed for professionals who need to understand what DORA requires, who it applies to, and how it reshapes digital resilience expectations across the financial sector. This course explains the purpose, scope, and core requirements of the regulation in clear, accessible terms, without assuming prior legal or technical expertise. Participants will explore the background and objectives of DORA, the range of financial entities in scope, the role of critical third-party ICT providers, and how DORA interacts with existing supervisory frameworks. The course covers the five core pillars of the regulation, including ICT risk management, ICT-related incident management and reporting, digital operational resilience testing, management of ICT third-party risk, and information and intelligence sharing. Learners will also see how DORA aligns with related frameworks such as NIS2, ISO 27001, NIST CSF, and GDPR, and how supervision, oversight of critical providers, and potential penalties apply in practice. By the end of the course, participants will be able to speak confidently about DORA concepts, recognize the key obligations that affect their organization, and contribute effectively to DORA readiness and compliance initiatives. Who it's for: Risk, security, compliance, legal, procurement, and operations professionals in banks, insurers, investment firms, and ICT providers, as well as managers and executives who need a solid foundation in DORA without prior specialist knowledge. Format: Short, self-paced modules with real-world examples, practical scenarios, and a closing knowledge check.