A tailored course, built for your situation
DORA Escalations Routed to Your Desk First
Become the default recipient for sensitive DORA-related work from senior sponsors across regulatory and compliance functions.
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Mid-senior compliance or risk practitioner in a financial institution handling DORA readiness, working across internal audit, legal, and IT teams to produce regulator-facing documentation.
Who this is not for
Entry-level analysts, auditors focused solely on SOC 2 or ISO 27001 without regulatory interface, or practitioners outside financial services.
What you walk away with
- Predictable routing of DORA-related escalations from peer teams without needing to request involvement
- Documented evidence packages that satisfy both internal reviewers and external regulators on first submission
- Direct handoffs from senior compliance leads on MiFID II and DORA crossover issues
- Effortless mapping of NIST 800-53 controls to DORA operational resilience requirements
- A repeatable process for turning EBA guidance into working control narratives
The 12 modules (with all 144 chapters)
Module 1. DORA's Core Obligations by Article
Break down DORA’s text article by article, focusing on operational resilience, incident reporting thresholds, and third-party risk expectations from EBA and national regulators.
12 chapters in this module
- Mapping Article 5 to internal audit scope
- Incident classification under Article 24
- Third-party oversight per Article 28
- Resilience testing frequency rules
- Cross-border data flow implications
- Defining critical ICT dependencies
- Tiering entities under DORA
- Regulator comms protocol design
- Evidence retention timelines
- Control sufficiency benchmarks
- Escalation paths for near-misses
- Documentation standards for audits
Module 2. NIST 800-53 to DORA Mappings
Translate NIST control families into DORA compliance requirements with direct references to EBA reporting templates and audit expectations.
12 chapters in this module
- Mapping AC-4 to access governance
- AU-6 logs for incident reporting
- CP-2 for incident response plans
- IA-2 for authentication controls
- RA-3 for risk assessments
- SI-4 for continuous monitoring
- SC-7 for network protection
- CM-6 configuration baselines
- PL-8 control ownership clarity
- IR-4 incident handling process
- CA-3 independence in audits
- RA-5 threat modeling depth
Module 3. EBA Review Cycle Preparation
Build regulator-facing documentation that anticipates EBA feedback loops, integrates peer-input efficiently, and avoids escalation loops.
12 chapters in this module
- Timing review cycles ahead
- Drafting response narratives
- Evidence pack assembly order
- Peer feedback integration
- Version control for submissions
- Gap analysis methodology
- Risk appetite alignment
- Third-party assurance inclusion
- Incident simulation scoring
- Audit trail completeness
- Regulator Q&A prep
- Follow-up response drafting
Module 4. Handling Peer-Team Escalations
Design intake workflows and triage protocols so peer teams default to sending you DORA-related escalations without delays or redirection.
12 chapters in this module
- Triage decision framework
- Escalation intake form design
- Routing rules by severity
- Ownership handoff scripts
- Cross-team comms templates
- Status update cadence
- Documentation expectations
- Feedback loop design
- SLA alignment across units
- Conflict resolution paths
- Urgency classification guide
- Resolution evidence capture
Module 5. Control Evidence Packaging
Assemble evidence packs that pass internal review and withstand regulator scrutiny, reducing time spent on revisions.
12 chapters in this module
- Evidence type by control
- Retention period rules
- Format consistency check
- Metadata tagging system
- Cross-reference indexing
- Version comparison method
- Automated collection tools
- Sampling sufficiency guide
- Audit trail capture
- Access certification logs
- Incident response records
- Testing outcome summaries
Module 6. Third-Party Risk Oversight
Apply DORA’s Article 28 requirements to vendor contracts, audits, and performance reviews with legal and procurement teams.
12 chapters in this module
- Vendor risk tiering
- Contract clause requirements
- Audit rights negotiation
- Performance threshold design
- Incident reporting timelines
- Subcontractor oversight
- Onsite review planning
- Remote audit protocols
- Exit strategy clauses
- Contingency activation
- Transition planning
- Due diligence refresh cycle
Module 7. Incident Response Under DORA
Build and test incident response plans that meet DORA’s 24-hour reporting threshold and regulator evidence standards.
12 chapters in this module
- Event classification matrix
- Internal alerting chain
- Escalation decision logic
- Regulator comms template
- Containment validation
- Recovery verification
- Post-mortem structure
- Root cause analysis
- Lessons learned integration
- Reporting deadline tracking
- Cross-jurisdiction coordination
- Public statement alignment
Module 8. Testing and Resilience Drills
Design, document, and report on operational resilience testing that satisfies DORA’s requirements and builds regulator confidence.
12 chapters in this module
- Test frequency rules
- Scenario selection logic
- Participant selection
- Simulation realism level
- Outcome measurement
- Evidence capture plan
- Gap identification
- Remediation tracking
- Regulator reporting format
- Lessons integration
- Scope expansion criteria
- Documentation retention
Module 9. Cross-Regulatory Alignment
Align DORA with MiFID II, GDPR, and PSD2 requirements to reduce duplication and streamline evidence sharing.
12 chapters in this module
- Overlap identification
- Shared control design
- Documentation reuse strategy
- Evidence portability
- Audit trail alignment
- Risk mapping
- Policy harmonization
- Regulator comms coordination
- Incident reporting overlap
- Testing alignment
- Vendor oversight convergence
- Review cycle synchronization
Module 10. Internal Audit Integration
Embed DORA requirements into internal audit planning, scoping, and reporting cycles to ensure alignment and reduce friction.
12 chapters in this module
- Audit plan coordination
- Scope inclusion process
- Control testing alignment
- Evidence sharing protocol
- Findings resolution tracking
- Follow-up timing
- Risk rating consistency
- Reporting format standards
- Resource allocation
- Audit independence checks
- Deficiency classification
- Remediation validation
Module 11. Regulator Communication Strategy
Develop clear, consistent communication protocols for regulator interactions, incident reporting, and follow-up responses.
12 chapters in this module
- Initial contact protocol
- Escalation path design
- Response drafting workflow
- Tone and clarity standards
- Legal review integration
- Incident reporting templates
- Follow-up tracking
- Stakeholder alignment
- External counsel coordination
- Public affairs alignment
- Document retention
- Audit trail maintenance
Module 12. Sustained Compliance Operations
Build durable processes that maintain DORA compliance across personnel changes, tech updates, and regulatory shifts.
12 chapters in this module
- Ownership transition plan
- Knowledge transfer protocol
- Control monitoring system
- Update notification process
- Training refresh cycle
- Policy version control
- Tech stack documentation
- Vendor change management
- Incident playbook updates
- Regulator change tracking
- Internal audit alignment
- Lessons integration mechanism
How this maps to your situation
- When a new DORA audit cycle starts
- After a peer team escalates a control gap
- Before submitting evidence to regulators
- During third-party contract negotiations
Before vs. after
Before
Waiting to be pulled into DORA discussions, reacting to escalations, and rebuilding evidence from scratch.
After
Proactively owning DORA work, receiving direct handoffs, and reusing proven artefacts across reviews.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per week over 6 weeks to complete all modules and build the implementation playbook.
How this compares to the alternatives
Unlike generic compliance courses, this program delivers concrete, reusable artefacts tied directly to DORA articles, NIST 800-53 mappings, and EBA expectations, so you’re not learning theory, but building real-world evidence packs and response workflows.
Frequently asked
Is this course specific to financial institutions?
Yes, it's designed for practitioners in banks, asset managers, and custodians like the firm, with examples drawn from EBA guidance and actual DORA audit cycles.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does it cover MiFID II and DORA overlap?
Yes, Module 9 focuses specifically on aligning DORA with MiFID II, GDPR, and PSD2 to reduce duplication.
$199 one-time. Approximately 3 hours per week over 6 weeks to complete all modules and build the implementation playbook..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours