This course provides an in-depth analysis of the EU Digital Operational Resilience Act (DORA), Regulation (EU) 2022/2554, which establishes a harmonised framework for ICT and cyber resilience across the financial sector. It examines the scope of DORA, its five key pillars, and the organisational impact on financial institutions, ICT providers, and supervisory authorities. The course covers ICT risk management, incident reporting, resilience testing, third-party risk, and information-sharing obligations, alongside proportionality principles and “security by design” requirements. Participants will also explore related EU legislation (NIS2, CRA, AI Act, DSA), the evolving geopolitical and cyber threat landscape, and practical compliance challenges, including the new reporting obligations for Registers of Information (RoIs).
- Teacher: Dr. Marios Kyriacou