Legalogix Academy’s Digital Operational Resilience Training is designed to help financial institutions, e-money institutions (EMIs), and other regulated entities align their ICT risk management practices with the latest Digital Operational Resilience Act (DORA) requirements. This comprehensive program equips participants with the skills to protect, detect, contain, recover, and learn from ICT incidents in a continuously evolving digital ecosystem.

Who Should Attend

• ICT managers, information security officers, and cybersecurity professionals

• Compliance officers, risk managers, and internal audit staff

• Board members and senior executives responsible for ICT governance

• Anyone aiming to strengthen or update their institution’s operational resilience strategy

Key Features

• Regulatory Alignment: Incorporates the latest DORA requirements, EBA guidelines, and broader EU regulations.

• Practical Approach: Real-world case studies, scenario-based exercises, and hands-on learning.

• Comprehensive Coverage: From incident management to cybersecurity controls and emerging technologies.

• Expert-led: Taught by professionals experienced in ICT governance, operational resilience, and regulatory compliance.

Detailed Training Plan

Module 1: ICT & DORA Fundamentals

1.1 Introduction to ICT & Operational Resilience
1.2 Key Terminology: ICT Risk, Operational Resilience, Cybersecurity
1.3 Overview of Digital Operational Resilience Act (DORA)
1.4 Importance of ICT Risk Management in Financial Institutions

Module 2: ICT & Security Risk Management Framework

2.1 ICT Risk Governance Requirements (EBA Guidelines, DORA)
2.2 Integration of ICT Risk into Enterprise Risk Management
2.3 Roles and Responsibilities: Board and Management Accountability
2.4 Three Lines of Defense Model in ICT & Security Risk

Module 3: ICT Risk Assessment & Management

3.1 ICT Asset Classification & Risk Assessment Methodologies
3.2 Identifying and Assessing ICT Risks (Availability, Integrity, Confidentiality)
3.3 ICT Risk Mitigation Measures and Controls
3.4 Annual ICT & Security Risk Assessments and Reporting

Module 4: ICT Incident Management & Reporting

4.1 ICT Incident Detection, Management, and Response Procedures
4.2 DORA Incident Reporting Requirements & Procedures
4.3 Communication and Escalation of ICT Incidents Internally and Externally
4.4 Post-incident Reviews and Documentation Requirements

Module 5: Operational Resilience & Business Continuity

5.1 Developing an ICT Business Continuity Plan (BCP)
5.2 ICT Disaster Recovery Planning and Testing
5.3 Ensuring Operational Resilience under DORA
5.4 Crisis Communication and Stakeholder Coordination

Module 6: Outsourcing & Third-party ICT Risk Management

6.1 Third-party & Critical ICT Providers Risk Management (DORA compliance)
6.2 Due Diligence, Monitoring, and Control of ICT Service Providers
6.3 Contractual Requirements for ICT Outsourcing
6.4 Exit Strategies and Business Continuity for Outsourced Services

Module 7: Cybersecurity & Information Security Controls

7.1 Cyber Threat Landscape and Preventative Measures
7.2 Cybersecurity Policies and Technical Controls
7.3 Staff Awareness and Cybersecurity Culture
7.4 Regular Security Testing (Penetration Testing, Vulnerability Assessments)

Module 8: ICT & Data Security Compliance

8.1 GDPR & Data Protection in ICT Management
8.2 Secure Data Handling and Privacy Controls
8.3 Regulatory Expectations for ICT Data Management
8.4 Incident Reporting Related to Data Breaches

Module 9: Technology Innovations & Emerging ICT Risks

9.1 Risks and Controls Associated with Cloud Computing, AI, Blockchain
9.2 Adapting ICT Risk Management to Technological Innovation
9.3 Leveraging Regulatory Technology (RegTech) for ICT Risk
9.4 Continuous Improvement of ICT Risk Management Practices

Module 10: ICT Audit & Supervisory Interactions

10.1 Internal and External Audits of ICT Systems
10.2 Preparing for ICT Regulatory Inspections (BoL, EBA)
10.3 Common Findings & Best Practices from ICT Audits
10.4 Effective Communication with Supervisory Authorities

Module 11: Case Studies & Practical Exercises

11.1 Analysis of Major ICT Incidents in the Financial Sector
11.2 Practical Exercises: ICT Incident Management Scenarios
11.3 Business Continuity & Disaster Recovery Testing Exercises
11.4 Lessons Learned & Improvement Plans from ICT Events

Module 12: ICT & DORA Assessment & Certification

12.1 Module-wise Knowledge Checks and Quizzes
12.2 Final Examination & ICT/DORA Certification

Learning Outcomes

• Understand key principles of operational resilience and ICT risk management

• Build a robust framework for incident management, ensuring compliance with DORA and related EU guidelines

• Integrate ICT risk assessment into enterprise risk management processes

• Develop effective business continuity and disaster recovery strategies

• Manage outsourcing and third-party risk in alignment with DORA requirements

• Strengthen cybersecurity defenses through staff awareness, technical controls, and regular testing

• Master ICT data security, including GDPR compliance and breach reporting

• Stay informed about emerging technologies and their associated risks

Certification

Upon successful completion of all modules and the final examination in Module 12, participants will receive a Legalogix ICT/DORA Certification, verifying a high level of proficiency in digital operational resilience and ICT risk management best practices.