A tailored course, built for your situation
Premium engagement picks with DORA expertise
Position yourself for high-impact assignments as DORA reshapes financial services compliance
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Compliance practitioners in global financial institutions navigating DORA implementation with limited differentiation in project allocation.
Who this is not for
Those not involved in operational resilience, third-party risk, or compliance frameworks within financial services.
What you walk away with
- First access to DORA-related premium engagements over peers
- Documented DORA control mappings tailored to asset management workflows
- Repeatable audit packages that reduce lift across recurring assignments
- Clear positioning to lead vendor resilience reviews end to end
- Internal reputation as go-to practitioner for DORA interpretation
The 12 modules (with all 144 chapters)
Module 1. DORA in the the firm context
Understand how DORA applies specifically to custody and asset servicing environments, with real scoping precedents from Tier 1 institutions.
12 chapters in this module
- What DORA means for custody banks
- Regulatory perimeter mapping
- In-scope ICT systems identification
- Third-party dependencies inventory
- Critical function classification
- Incident reporting thresholds
- Sub-outsourcing exposure tracking
- Resilience testing expectations
- Internal audit alignment points
- Vendor contract clauses to flag
- Board-level reporting cadence
- Current the firm implementation phase
Module 2. Operational resilience by design
Shift from checklist compliance to proactive resilience architecture that anticipates audit scrutiny and reduces rework.
12 chapters in this module
- Resilience vs availability defined
- Impact tolerance scoping
- Business service mapping
- Dependency visualization
- Single point of failure analysis
- Recovery time benchmarks
- Fallback procedure validation
- Scenario stress testing
- Cross-border coordination rules
- Incident severity classification
- Escalation paths documented
- Resilience testing calendar setup
Module 3. Third-party risk redefined under DORA
Go beyond due diligence to own the vendor review lifecycle with confidence, from selection to decommissioning.
12 chapters in this module
- Vendor segmentation by risk tier
- Pre-contract resilience assessment
- Right to audit enforcement
- Sub-processor transparency demand
- Contractual SLA alignment
- Incident reporting timeframes
- Penetration testing rights
- Security control validation
- Audit trail access rights
- Exit strategy integration
- Vendor incident response playbooks
- Multi-geography compliance mapping
Module 4. Building the DORA audit package
Assemble a living compliance artefact that anticipates reviewer questions and reduces follow-up cycles.
12 chapters in this module
- Audit scope boundary definition
- Control ownership assignment
- Evidence collection workflow
- Version-controlled documentation
- Cross-functional input integration
- Gap assessment methodology
- Remediation tracking system
- Internal review sign-off
- External auditor handover
- Frequently cited findings list
- Regulator follow-up prep
- Continuous improvement loop
Module 5. Incident classification and reporting
Classify and escalate incidents with confidence using EBA-prescribed criteria and internal thresholds.
12 chapters in this module
- Incident vs event distinction
- Materiality assessment framework
- 72-hour reporting rule
- EBA Form 1 completion guide
- Internal logging standard
- Cross-border notification rules
- Stakeholder communication plan
- Public disclosure triggers
- Post-incident review structure
- Lessons learned integration
- Repeat incident tracking
- Root cause analysis template
Module 6. Testing resilience under DORA
Design and document resilience tests that satisfy regulators and strengthen internal confidence.
12 chapters in this module
- Testing frequency by vendor tier
- Tabletop exercise design
- Technical penetration testing scope
- Failover simulation planning
- Fallback activation procedure
- Customer communication test
- Incident escalation drill
- Post-test review cadence
- Gap identification method
- Corrective action tracking
- Regulatory evidence compilation
- Test report structure
Module 7. DORA governance structures
Map roles and responsibilities clearly to avoid overlap and ensure accountability across teams.
12 chapters in this module
- RACI matrix for DORA
- Steering committee composition
- Working group coordination
- Compliance vs operations split
- Legal team integration
- External advisor use cases
- Decision escalation paths
- Policy approval workflow
- Change control integration
- Training program rollout
- Awareness campaign design
- KPIs for governance effectiveness
Module 8. Vendor risk documentation
Create audit-ready vendor dossiers that demonstrate proactive oversight and reduce review friction.
12 chapters in this module
- Vendor onboarding checklist
- Risk rating methodology
- Due diligence questionnaire
- Control validation process
- Oversight meeting cadence
- KPIs for performance tracking
- Incident history review
- Resilience test access rights
- Audit trail retention policy
- Contract renewal preparation
- Transition readiness check
- Decommissioning documentation
Module 9. Internal audit alignment
Work with internal audit to position DORA efforts as strategic enablers, not compliance overhead.
12 chapters in this module
- Audit planning collaboration
- Scope alignment calendar
- Evidence access protocol
- Finding response workflow
- Remediation tracking system
- Cross-team validation process
- Audit exception management
- Control testing automation
- Regulatory update monitoring
- Benchmarking against peers
- Maturity assessment tool
- Continuous feedback integration
Module 10. Cross-border compliance nuances
Navigate differences in DORA interpretation and enforcement across jurisdictions.
12 chapters in this module
- EU vs non-EU branch rules
- Local regulator expectations
- Data sovereignty constraints
- Incident reporting localization
- Language requirements
- Legal entity alignment
- Centralized vs local testing
- Vendor oversight consistency
- Audit trail access rights
- Regulatory cooperation protocols
- Enforcement precedent review
- Cross-border team coordination
Module 11. DORA and cloud infrastructure
Adapt DORA requirements to modern cloud environments with layered oversight.
12 chapters in this module
- Cloud service classification
- Shared responsibility model
- IaaS vs PaaS controls
- Encryption key management
- API security review
- Network segmentation rules
- Access logging standards
- Incident correlation tools
- Resilience in multi-cloud
- Cloud-native testing approaches
- Provider incident response
- Exit strategy validation
Module 12. Sustaining DORA maturity
Turn initial compliance into durable practice with feedback loops and continuous improvement.
12 chapters in this module
- Maturity model application
- Continuous monitoring setup
- Internal audit feedback use
- Regulatory update integration
- Staff turnover resilience
- Training refresh cycle
- Lessons learned database
- Benchmarking against peers
- Stakeholder reporting rhythm
- Budget cycle alignment
- Resource planning integration
- Succession planning for leads
How this maps to your situation
- When scoping a new vendor engagement
- During internal audit preparation
- After a regulatory change notification
- Before a resilience test cycle
Before vs. after
Before
Engagements assigned reactively, with unclear differentiation in workload quality.
After
First access to premium DORA-related assignments with documented positioning and repeatable artefacts.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per week over 12 weeks, with self-paced access.
How this compares to the alternatives
Unlike generic compliance courses, this program focuses exclusively on DORA implementation in asset management and custody environments, with templates tailored to institutions like the firm.
Frequently asked
Is this relevant if I'm not in a leadership role?
Yes. This course is designed for individual contributors shaping DORA outcomes through documentation, review, and implementation.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me stand out in project allocation?
Yes. The course builds documented expertise and repeatable artefacts that signal readiness for premium engagements.
$199 one-time. Approximately 3 hours per week over 12 weeks, with self-paced access..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours