Training Objectives

By the end of the programme, participants will:

• Have a good understanding of the main elements of the five pillars of DORA
• Know the processes to be put in place for the ICT and security risk framework based on EBA Guidelines and DORA
• Know what to include in an Information Security Policy
• Understand the ICT-related incident management process, classification and reporting based on DORA
• Know how to establish a sound business continuity management process
• Recognise the establishment, maintenance and reviewing of a sound and comprehensive digital operational resilience testing programme

Training Outline

• EBA Guidelines and DORA: scope, definitions and purpose
• Internal governance and internal control framework
• Requirements for information security
• Requirements for ICT project and change management
• Business continuity management and recovery plans
• Five pillars of DORA and what they achieve
• ICT-related incident management process, classification and reporting based on DORA

Who Should Attend

• Directors
• Senior Managers
• Compliance officers
• ICT specialists/officers
• Financial consultants
• Professionals in the banking sector

Training Style

This programme is designed to deliver high-level knowledge and insights into the EBA Guidelines on ICT and security risk management and DORA. It will strive to enhance participants’ skills and knowledge via lectures supported by power-point presentations. The training style is learner-focused, where participants are encouraged to raise questions, seek clarifications and share their opinions from their different perspectives and engage in an exchange of views and personal professional experiences.

CPD Recognition

This programme may be approved for up to 6 CPD units in Banking and Financial Regulation. Eligibility criteria and CPD Units are verified directly by your association, regulator or other bodies which you hold membership.

In-house Training

For groups within the same organisation, this course may be customized to meet any specific needs and delivered in-house.