Certified Digital Operational Resilience Act (DORA) Lead Manager Training

As the financial sector heavily relies on digital technologies, new cyber threats continue to emerge. In response, the European Union has developed the Digital Operational Resilience Act (DORA) to enhance digital operational resilience in the financial sector. DORA is a regulation that requires entities in the financial sector to ensure they can withstand, respond to, and recover from all types of ICT-related incidents, risks, and threats. It was enacted by the European Parliament and the Council of the European Union on December 14, 2022, Regulation (EU) 2022/2554, and seeks to harmonize and streamline regulations related to ICT risk management, ensuring consistency and coherence across the EU. DORA requires financial entities to adhere to the principle of proportionality, which considers their operations’ size, risk profile, and complexity.

Why Should You Consider Being a Certified DORA Lead Manager?

With DORA taking effect on January 17, 2025, it is essential for professionals to ensure compliance, strengthen cybersecurity, and enhance operational resilience in the financial sector. Attending the PECB Certified DORA Lead Manager training course offers a unique opportunity to engage with industry experts and peers, fostering valuable discussions and insights into best practices for digital operational resilience. Through interactive sessions and practical exercises, you will gain real-world perspectives on implementing effective strategies to mitigate ICT risks and enhance digital operational resilience in financial institutions.

Additionally, attending this course demonstrates your commitment to professional development and positions you as a competent leader in the evolving landscape of digital operational resilience. Upon successfully completing the training course and exam, you can apply for the “PECB Certified DORA Lead Manager” credential.

Learning objectives

After completing this training course, you will be able to:

• Understand the purpose of DORA and interpret its requirements
• Understand the fundamentals of ICT risk management, incident management, and digital operational resilience
• Prepare and plan the implementation of DORA requirements
• Implement the five main pillars to enhance digital operational resilience in accordance with DORA’s requirements
• Review and continually improve the digital operational resilience of an organization

Download Certified DORA Lead Manager Training Course Brochure

Educational approach

• The training course incorporates interactive elements, such as essay-type exercises and multiple-choice quizzes, some of which are scenario-based.
• Participants are strongly encouraged to communicate and engage in discussions.
• The quizzes are designed in a manner that closely resembles the format of the certification exam.

Prerequisites

The main requirement for participating in this training course is having a fundamental understanding of information security and cybersecurity concepts, and familiarity with ICT risk management principles.

Course Agenda

Day 1: Introduction to the concepts and requirements of DORA

Day 2: ICT-related risk and incident management

Day 3: ICT third-party risk management and information sharing

Day 4: Review and continual improvement

Day 5: Certification exam

Examination

The “PECB Certified DORA Lead Manager” exam meets the PECB Examination and Certification Program (ECP) requirements, and it covers the following competency domains:

Domain 1: Fundamental concepts of ICT risk management and digital operational resilience  

Domain 2: Preparing and planning for DORA project implementation 

Domain 3: ICT risk and ICT-related incident management 

Domain 4: Digital operational resilience testing and ICT third-party risk management 

Domain 5: Review and continual improvement

General Information

• Certification and examination fees are included in the price of the training course.
• Participants will be provided with training course materials containing over 400 pages of information, practical examples, exercises, and quizzes.
• An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
• Candidates who have completed the training course but failed the exam are eligible to retake the exam once for free within a 12-month period from the initial date of the exam.

Certification

After successfully passing the exam, you can apply for one of the credentials shown below. You will receive the certificate once you comply with all the requirements related to the selected credential.

The requirements for certifications are as follows:

The ICT risk management activities should follow best practices and include the following:

• Drafting a DORA implementation business case
• Managing a DORA implementation project
• Implementing an ICT risk management framework
• Managing documented information
• Implementing corrective actions
• Monitoring and improving the performance of the ICT risk management framework