A tailored course, built for your situation
Deeper command of DORA requirements for senior compliance leads
Master the framework, own the implementation, deliver with confidence
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior compliance and governance practitioners in financial institutions facing direct DORA obligations or internal adoption of its controls
Who this is not for
Individual contributors new to regulatory compliance or those outside financial services subject to DORA
What you walk away with
- Complete internal mapping of DORA Article 16 incident reporting tiers to existing incident response workflows
- Ability to lead internal mock audits using regulator-aligned checklists
- Clear decision rules for classifying ICT third-party relationships under Article 21
- Annotated playbook for coordinating with legal, security, and business continuity teams during DORA evidence cycles
- Faster turnaround on control documentation due to reusable templates and precedent examples
The 12 modules (with all 144 chapters)
Module 1. DORA scope and applicability in tiered financial institutions
Understand how DORA applies to institutions based on size, service type, and market role, with focus on thresholds triggering enhanced obligations.
12 chapters in this module
- Institutional classification under DORA
- Significance thresholds for digital service providers
- Service-level categorization logic
- Mapping internal units to reporting entities
- Determining notification obligations
- Incident severity band definitions
- Review cycle triggers by tier
- Cross-border implications
- National competent authority roles
- Internal governance alignment points
- Exemption considerations
- Framework alignment roadmap
Module 2. ICT third-party risk classification framework
Apply DORA’s rules for identifying, categorizing, and overseeing third-party ICT providers with material operational impact.
12 chapters in this module
- Defining ICT-related services
- Materiality assessment factors
- Criticality determination process
- Subcontractor oversight rules
- Due diligence expectations
- Contractual clause requirements
- Audit rights enforcement
- Concentration risk tracking
- Exit planning obligations
- Oversight committee structure
- Reporting to internal audit
- Escalation pathways
Module 3. Incident classification and reporting workflows
Classify ICT incidents according to severity levels and execute standardized reporting timelines aligned with regulator expectations.
12 chapters in this module
- Event vs incident distinction
- Level 3 incident criteria
- Level 4 incident criteria
- Initial reporting template structure
- Follow-up submission deadlines
- Escalation to national authority
- Internal logging standards
- Evidence retention rules
- Cross-team coordination triggers
- False positive handling
- Remediation tracking
- Post-incident review protocol
Module 4. Internal digital operational resilience testing
Design and lead testing programs that meet DORA’s requirements for scenario depth, frequency, and oversight.
12 chapters in this module
- Types of resilience testing
- Scenario development standards
- Test frequency by entity tier
- Internal governance review
- Documentation expectations
- Third-party involvement rules
- Gap identification methods
- Corrective action tracking
- Management reporting format
- Regulator submission readiness
- Lessons learned integration
- Annual test planning
Module 5. Cooperation with financial intelligence units
Navigate information-sharing obligations between financial entities and national competent authorities under DORA.
12 chapters in this module
- Information request triggers
- Data scope definitions
- Response time requirements
- Internal clearance process
- Legal hold procedures
- Redaction protocols
- Secure transmission methods
- Cross-border access rules
- Follow-up inquiry handling
- Recordkeeping obligations
- Audit trail maintenance
- Coordination with legal counsel
Module 6. Framework alignment across governance functions
Integrate DORA requirements into existing risk, compliance, and security governance structures without duplication.
12 chapters in this module
- Control overlap identification
- Single source of truth setup
- Role delineation matrix
- Policy harmonization strategy
- Cross-functional review rhythm
- Change impact assessment
- Version control practices
- Training material alignment
- Internal audit coordination
- External examiner prep
- Stakeholder communication plan
- Continuous improvement loop
Module 7. Third-party contract enforcement mechanisms
Ensure vendor contracts include enforceable terms for DORA compliance, audit rights, and incident notification.
12 chapters in this module
- Mandatory clause checklist
- Audit right language
- Incident reporting timelines
- Subcontractor flow-down rules
- Performance penalty structure
- Termination triggers
- Dispute resolution path
- Liability limitations
- Insurance requirements
- Compliance verification process
- Renewal condition review
- Oversight reporting frequency
Module 8. Digital operational resilience policy drafting
Build institution-specific policies that satisfy DORA’s requirements and align with internal risk appetite.
12 chapters in this module
- Policy structure standards
- Risk appetite linkage
- Approval authority mapping
- Scope definition
- Incident response integration
- Testing requirement inclusion
- Third-party oversight section
- Change management process
- Distribution list setup
- Version control method
- Review cycle cadence
- Exception handling rules
Module 9. Cross-border incident coordination
Manage reporting and response for incidents involving multiple jurisdictions under DORA’s cooperation framework.
12 chapters in this module
- Jurisdictional lead determination
- Primary reporting responsibility
- Information sharing protocols
- Language translation rules
- Time zone coordination
- Regulatory alignment challenges
- Escalation to ESAs
- Joint investigation procedures
- Data localization constraints
- Confidentiality agreements
- Multi-entity incident logging
- Resolution timeline tracking
Module 10. Regulator engagement and examination prep
Prepare for DORA-related inquiries, mock exams, and formal reviews with confidence and consistency.
12 chapters in this module
- Examination notice response
- Document request workflow
- Internal preparatory review
- Subject matter expert briefing
- Evidence packaging standards
- Follow-up question handling
- Deficiency response drafting
- Corrective action plan submission
- Timeline adherence tracking
- Lessons capture process
- Post-exam reporting
- Ongoing compliance monitoring
Module 11. Training and awareness program design
Develop role-specific training that ensures sustained DORA compliance across legal, IT, security, and operations teams.
12 chapters in this module
- Audience segmentation
- Learning objective definition
- Content development process
- Delivery method selection
- Frequency requirements
- Attendance tracking
- Effectiveness measurement
- Gap remediation plan
- Refresher cycle setup
- Leadership engagement strategy
- Feedback collection
- Program improvement
Module 12. Sustained compliance and continuous improvement
Embed DORA compliance into ongoing operations with feedback loops, metrics, and leadership reporting.
12 chapters in this module
- KPI definition for resilience
- Dashboard design
- Management reporting rhythm
- Trend analysis method
- Benchmarking approach
- Lessons learned system
- Control effectiveness review
- Process refinement cycle
- Technology enablement
- Resource planning
- Succession planning
- External validation prep
How this maps to your situation
- When preparing for first DORA audit cycle
- While managing third-party ICT provider relationships
- During cross-functional incident response
- Ahead of regulatory engagement or exam
Before vs. after
Before
Surface-level familiarity with DORA, reliant on external consultants and cross-functional alignment to meet deadlines.
After
Internal ownership of DORA requirements, ability to lead evidence cycles, and confidence in regulator-facing responses.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion over 6, 8 weeks with on-the-job application.
How this compares to the alternatives
Unlike generic compliance courses, this program focuses exclusively on DORA’s requirements with financial institution context, real-world examples, and templates tailored to firms of Schwab’s size and complexity.
Frequently asked
Is this course relevant for non-European financial institutions?
Yes. While DORA applies directly to EU institutions, its standards are becoming the reference model globally, especially in firms managing critical ICT dependencies and third-party risk.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does the course cover FFIEC or other U.S. frameworks?
The focus is DORA, but the control logic and implementation rigor apply directly to FFIEC and SR 11-7 alignment efforts, making it highly relevant for U.S. financial firms.
$199 one-time. Approximately 3 hours per module, designed for completion over 6, 8 weeks with on-the-job application..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours