EXECUTIVE CYBERSECURITY TRAINING · DORA
BlueTeamACADEMY
Start 30-day demo

PROFESSIONAL PROGRAMME

DORA Training for ICT, Risk & Compliance Teams

Operational training for teams that implement ICT risk controls, coordinate incident reporting, test recovery and evidence third-party oversight.

Digital Operational Resilience Act, Articles 6–15, 17–30 and 13(6)

BlueTeam Academy
8 modules · 16 assessment questionsApproximately 2.5 hoursNamed certificate of completion

WHO THIS IS FOR

Practical decisions in your regulatory context.

ICT, security, risk, compliance, continuity and supplier-management practitioners at in-scope financial entities.

Digital Operational Resilience Act, Articles 6–15, 17–30 and 13(6)

This programme develops operational judgement under DORA’s general framework and flags the separate Article 16 simplified framework. It connects role-specific learning under Article 13(6) with implementation and evidence. Apply the regulatory technical and implementing standards, current reporting templates and supervisory instructions relevant to your entity; this course is not a substitute for that implementation work.

INSIDE THE COURSE

8 modules. Decisions you can practise.

Each module includes a practical role-specific scenario, a decision check and a written reflection. Complete the modules before taking the final scenario assessment.

  1. 01

    Scope, governance and the control framework

    Translate applicable requirements into owned controls, evidence and escalation routes.

    15 min
  2. 02

    Service mapping and ICT risk assessment

    Map services to assets and dependencies and evaluate residual ICT risk.

    15 min
  3. 03

    Protection, access and controlled change

    Evaluate access, vulnerability and change controls against operational evidence.

    15 min
  4. 04

    Detection, classification and incident reporting

    Coordinate incident facts, classification and reporting against the applicable rules.

    15 min
  5. 05

    Continuity, backup and recovery assurance

    Validate recovery capability at the business-service level and track unresolved limitations.

    15 min
  6. 06

    Resilience testing and remediation

    Design risk-based tests and close findings with evidence of effective remediation.

    15 min
  7. 07

    ICT providers, registers and exit readiness

    Connect provider inventories, contracts, concentration risk and practical exit arrangements.

    15 min
  8. 08

    Evidence, reporting and continuous improvement

    Produce traceable management evidence and turn incidents and findings into owned improvements.

    15 min
  9. ✓

    16 scenario questions · 80% pass mark

    Allow approximately 30 minutes for the final assessment and review.

LEARNING THAT LEAVES A RECORD

Practise, assess and document completion.

Apply the decisions

Work through role-relevant situations, explain your reasoning and connect the learning to your company’s procedures. Progress is saved as you complete each module.

Keep named evidence

After the module checks, written exercises and a passing assessment, receive a named certificate showing the course version and result. Administrators can export company completion reports and individual certificates.

Lessons and assessment are in English. Written responses are retained, not independently graded. Duration and the pass mark are Academy choices, not statutory thresholds. Completion is not accreditation or proof of organisational regulatory compliance.

Primary sources

Programme version: dora-ict-risk-compliance-v1 · Content reviewed 14 October 2026