The fast lane to sustainable awareness
DORA compliance training
2.000+ customers trust in our compliance training – from startups to large corporations
The importance of operational resilience
Training managers and employees on DORA
Digital Operational Resilience affects all areas of a company. Train these areas to effectively implement the DORA regulation:
- How does company-wide security work today? How do you become digitally resilient?
- What does DORA require, and why does it make perfect sense?
- What is my role as an executive or employee?
In 20 minutes you can teach all the essential content. With individual learning paths
Operational resilience
Operational resilience
- Without any legal requirements: how does company-wide security work today? How can an organization become “digitally resilient”?
- A triad of information security management, business continuity management and third-party risk management.
- Not just for cyber risks, but for all risks that can disrupt the organization's operations.
Key messages:
- Security and digital resilience are not an “IT thing”, but run through all areas of the business.
- Risk management is the be-all and end-all, not only in your own organization, but also along the value chain.
- Despite comprehensive measures, disruptions can always occur, and you have to be prepared for that too.
A glimpse into our e-learning:
The DORA regulation
The DORA Regulation
- What Does DORA Require from Affected Companies?
Operational Resilience and Risk Management. Risks in Information and Communication Technology (ICT) must be identified and managed as effectively as possible. - Classification and Reporting of ICT Incidents. Affected companies must be able to systematically detect, report, and manage incidents related to ICT.
- Testing Digital Operational Resilience. DORA mandates regular assessments and, if necessary, adjustments to protective measures.
- Third-Party Risk Management. Many ICT services are provided by external vendors. Therefore, it is crucial to consider associated risks within a Third-Party Risk Management (TPRM) framework.
- Information Sharing. DORA actively promotes voluntary information exchange between affected companies and supervisory authorities.
Key Message:
DORA strengthens the resilience of the financial industry and its ICT service providers against cyber threats in a sustainable and long-term manner. Attacks are detected earlier, incidents are handled more quickly and effectively, and potential damage is minimized.
A glimpse into our e-learning:
My responsibilities
My Responsibilities
The training differentiates between executives and employees, as they have distinct roles in implementing DORA.
- Executives are responsible for their business units, act as information owners, and serve as role models for their teams.
- Security teams can support implementation, but identifying risks in business processes (e.g., BIA, RIA) can only be successful with the involvement of the business units.
- Responsibility for implementation does not lie with Security or IT but with senior management—and consequently with every executive.
Key Messages (for Executives):
- It’s about your information and your responsibility. And it’s about protecting the company from existential threats.
- Ensure that security measures are implemented in your area. Actively support implementation with resources and expertise.
- Make sure that ICT services are only used after a prior risk analysis and due diligence within the Third-Party Risk Management framework.
- Ensure that employees regularly participate in relevant training, education, and awareness programs.
Pricing? Demos? Consultation?
Get a free demo account and let's talk about your situation and your goals in a web meeting. We look forward to hearing from you.
Complete platform
For mid-sized companies, the DORA training is included in our IS-FOX Awareness Platform. Simply select licenses, invite participants, and you're done! The platform takes care of the rest automatically: sending invitations and reminders, tracking progress, and providing statistics. That’s how training works today.
Or customized to your needs
Do you have your own Learning Management System (LMS) or require customizations? No problem! Our courses are designed for efficient customization and can quickly become your course—with your contacts, reporting channels, specific requirements… and your logo.
FAQs
Yes, DORA requires financial companies and relevant ICT service providers to provide cybersecurity and resilience training for employees and management.
Our IS-FOX online training courses fully and verifiably cover both general awareness and DORA-specific content.
Concise and to the point, with videos, interactive exercises, and a certificate.
Ja, DORA verpflichtet Finanzunternehmen und relevante IKT-Dienstleister zu Cyber-Security- und Resilienz-Schulungen für Mitarbeiter und das Management.
Unsere IS-FOX Online Schulungen decken sowohl allgemeine Awareness als auch die DORA-spezifischen Inhalte vollständig und nachweisbar ab.
Auf den Punkt, mit Videos, interaktiven Übungen und Zertifikat.
Naturally. We regularly add new content to our e-learning portfolio and update existing training courses to respond to the latest developments in the security and compliance world.
Thanks to our ISMS, compliance and security tech experts, we are always up to date.
Yes! All content complies with the applicable laws and regulations. The didactic learning expertise conveys clear, simple messages (“Stop at red, go at green”).
With customized e-learning, you can link to further and legally binding intranet pages, codes of conduct or guidelines and work instructions.