DORA Academy Operational Resilience
The DORA certification programme

Become the person your firm trusts on operational resilience.

Nine self-paced certification programmes on the Digital Operational Resilience Act — written for the compliance, risk and contract professionals of EU finance. One is free. Every one ends in a credential.

16
Certification programmes
182
Lessons & knowledge checks
Free
Foundation course
A real certification — not just a course

Every programme ends in a verifiable certificate.

Each course issues a certificate with a unique ID and a QR check on a public verification page — and adds to your LinkedIn profile in one click. Proof your firm, your peers and auditors can trust.

Verifiable certificate LinkedIn badge Lifetime access
01 — The Catalogue

Choose your credential.

From a free foundation to expert-tier programmes. Lifetime access, knowledge checks and a PDF certificate on every course.

01
Beginner No charge

DORA Fundamentals Certification

Duration3.5 hours
Modules7
CredentialPDF cert.

Master the fundamentals of DORA regulation. Perfect for professionals starting their compliance journey.

  • Understand the 5 pillars of DORA
  • Know key requirements and deadlines
  • Identify impacts on your organization
  • Navigate regulatory documentation
Free
Verifiable certificate · Lifetime access
02
Expert ★ Most complete

Certified DORA Project Manager (CDPM)

Duration4.5 hours
Modules9
CredentialPDF cert.

The complete project-manager certification: run a DORA implementation end to end — scope, governance, all five pillars, evidence and closure.

  • Scope a DORA programme: applicability, regime & critical functions
  • Deliver all five pillars as evidenced, audit-ready deliverables
  • Build the roadmap, critical path, budget & RAID controls
  • Evidence, close and transition DORA to continuous compliance
99
Verifiable certificate · Lifetime access
03
Advanced

Certified DORA Advisor (CDA)

Duration4 hours
Modules5
CredentialPDF cert.

The client-facing credential for consultants, lawyers and auditors. Scope an engagement, build the client programme, evidence it — and prove your DORA competence with a verifiable certificate you show to clients.

  • Scope a client engagement and classify the entity (Art. 2 / Art. 16)
  • Build a prioritised, evidenced five-pillar programme
  • Re-paper Article 30 contracts & build the Register of Information
  • Assemble a supervisory-ready evidence file clients can rely on
149
Verifiable certificate · Lifetime access
04
Advanced

Certified DORA AI-Resilience Specialist

Duration4 hours
Modules5
CredentialPDF cert.

Cyber resilience for the AI era, aligned to DORA. Understand AI-orchestrated attacks (GTG-1002) and superhuman vulnerability discovery (Mythos), apply machine-speed defences, and evidence them against every DORA pillar.

  • Understand AI-orchestrated attacks & superhuman vuln discovery
  • Apply machine-speed detection, identity & deception controls
  • Map the AI threat to all five DORA pillars
  • Build an AI-threat-ready, supervisor-evidenced programme
149
Verifiable certificate · Lifetime access
05
Intermediate

Certified DORA Contract Manager (CDCM)

Duration3.5 hours
Modules6
CredentialPDF cert.

The dedicated certification for contract, procurement and vendor managers. Master Article 30 clauses, the Register of Information, re-papering and vendor negotiation under DORA.

  • Draft & negotiate every Article 30 mandatory clause
  • Build a DORA clause library & run a re-papering programme
  • Own the Register of Information end to end
  • Negotiate with hyperscalers & survive a supervisory audit
59
Verifiable certificate · Lifetime access
06
Intermediate

ICT Risk Management Professional

Duration3 hours
Modules6
CredentialPDF cert.

Deep dive into ICT risk management frameworks, business continuity, and operational resilience.

  • Design comprehensive ICT risk frameworks
  • Implement business continuity plans
  • Conduct risk assessments and audits
  • Manage operational resilience programs
59
Verifiable certificate · Lifetime access
07
Intermediate

Incident Reporting Specialist

Duration2.5 hours
Modules5
CredentialPDF cert.

Master incident classification, reporting workflows, and regulatory communication.

  • Classify incidents according to DORA criteria
  • Implement reporting workflows and timelines
  • Communicate with competent authorities
  • Manage incident documentation and tracking
49
Verifiable certificate · Lifetime access
08
Advanced

Third-Party Risk Management Expert

Duration3 hours
Modules6
CredentialPDF cert.

Comprehensive training on managing ICT third-party providers, contracts, and continuous monitoring.

  • Build and maintain TPP registers
  • Negotiate DORA-compliant contracts
  • Implement continuous monitoring programs
  • Manage sub-outsourcing and exit strategies
69
Verifiable certificate · Lifetime access
09
Advanced

TLPT Tester Certification

Duration2.5 hours
Modules6
CredentialPDF cert.

Become a certified TLPT tester. Learn threat-led penetration testing methodologies and best practices.

  • Plan and scope TLPT engagements
  • Execute threat-based attack scenarios
  • Document findings and recommendations
  • Conduct remediation validation
79
Verifiable certificate · Lifetime access
10
Advanced

Business Continuity, DRP & Test Exercises

Duration2.5 hours
Modules6
CredentialPDF cert.

Design, document and test ICT business continuity and disaster recovery under DORA — from business impact analysis to scenario exercises.

  • Run a business impact analysis and set RTO/RPO
  • Build a DORA-compliant ICT business continuity plan & DRP
  • Design and run scenario, tabletop & full recovery tests
  • Lead crisis management and post-exercise improvement
69
Verifiable certificate · Lifetime access
11
Advanced

DORA Programme Manager

Duration4 hours
Modules9
CredentialPDF cert.

Plan, run and close a DORA programme using ISO 27001 as your roadmap — full DORA↔ISO 27001 control mapping, the regulatory delta, priorities and quick wins.

  • Use ISO 27001 as the DORA roadmap & map every control
  • Pinpoint the DORA delta ISO does not cover (reporting, TLPT, Register, Art. 30)
  • Prioritise with a risk/deadline matrix & bank early quick wins
  • Run, evidence and close the programme to the deadline
129
Verifiable certificate · Lifetime access
12
Expert

DORA Implementation Director

Duration3 hours
Modules6
CredentialPDF cert.

Complete mastery program for leading organization-wide DORA implementation projects.

  • Design enterprise-wide compliance programs
  • Lead cross-functional implementation teams
  • Manage budgets and resources
  • Report to boards and regulators
99
Verifiable certificate · Lifetime access
13
Intermediate

DORA Compliance Officer

Duration4.5 hours
Modules6
CredentialPDF cert.

The dedicated certification for the role banks and insurers hire first: the obligations map, second-line monitoring, regulatory reporting and supervisory engagement.

  • Build the DORA obligations map & monitor second-line
  • Own incident reporting & the Register submission
  • Engage supervisors & integrate with the SREP
  • Run continuous, audit-ready compliance
79
Verifiable certificate · Lifetime access
14
Advanced

DORA × ISO 27001 Lead Implementer

Duration4.5 hours
Modules6
CredentialPDF cert.

Implement DORA on an ISO 27001 ISMS: extend the management system, map all 93 Annex A controls, build the regulatory delta, run one integrated control environment.

  • Extend the ISMS (clauses 4–10) for DORA
  • Map Annex A controls to every DORA obligation
  • Build & govern the DORA delta inside the ISMS
  • Run one audit cycle certifying ISO 27001 & DORA
99
Verifiable certificate · Lifetime access
15
Advanced

DORA Internal Auditor

Duration4.5 hours
Modules6
CredentialPDF cert.

Provide independent third-line assurance over DORA: plan the audit by risk, test each pillar, evidence findings and report to the audit committee.

  • Build the DORA audit universe & risk-based plan
  • Test each pillar for design & operating effectiveness
  • Evidence findings, root cause & form an opinion
  • Report and follow findings to verified closure
79
Verifiable certificate · Lifetime access
16
Intermediate

DORA Register of Information Specialist

Duration4 hours
Modules6
CredentialPDF cert.

Master DORA’s hardest artefact end to end: the data model, sourcing, critical-function tagging, subcontracting chains, quality and supervisory submission.

  • Model the ITS templates & define an internal schema
  • Source, tag criticality & capture subcontracting chains
  • Validate, reconcile & submit to the supervisor
  • Maintain the Register & power third-party oversight
69
Verifiable certificate · Lifetime access
02b — Save with a track

Bundle the path, save the price.

🛡️ DORA Compliance & Assurance Track

The second- and third-line career path: own compliance, audit it, and master the Register.

€179 €227 save €48
3 certifications · lifetime access
Get the track

🔗 DORA × ISO 27001 Track

For ISMS-led teams: implement DORA on ISO 27001 and run the programme end to end.

€179 €228 save €49
2 certifications · lifetime access
Get the track
Best value

🎖️ DORA Academy All-Access

Every paid certification — the complete DORA credential library, one price.

€399 €1037 save €638
13 certifications · lifetime access
Get the track
02 — Why this Academy

Built for practitioners, not lecture halls.

i.

Regulation-anchored

Every lesson cites the DORA articles and the RTS/ITS behind it. You learn the law, not a paraphrase.

ii.

Role-specific

Programmes written for the actual job — contract manager, incident specialist, programme manager — not a generic overview.

iii.

Self-paced

Lifetime access. Study in the gaps of a working week, on any device, and return whenever the regulation moves.

iv.

Assessed

Knowledge checks in every module and a final certification exam. A credential you earn, not one you buy.

v.

Credentialled

A verifiable PDF certificate with a unique ID and QR check — ready for your CV and LinkedIn.

vi.

Fairly priced

From free to €99. Professional depth without the four-figure price tag of classroom training.

03 — How it works

From enrolment to a verifiable credential.

1
Learn at your pace

Self-paced lessons and knowledge checks. Every lesson cites the DORA articles and the RTS/ITS behind it — you learn the law, not a paraphrase.

2
Pass the exam

Each programme ends in a timed, scored exam. Reach the pass mark and your certificate is issued instantly — retakes are allowed.

3
Prove it anywhere

Your certificate carries a unique ID and a QR check on a public verification page — and adds to your LinkedIn profile in one click.

04 — Before you enrol

Questions, answered.

Will a DORA certification be valued by employers?+

Absolutely. Banks, insurers and financial institutions across the EU are scaling their DORA capability fast — and increasingly look for exactly this profile. A verifiable DORA credential makes your expertise visible on your CV and LinkedIn, and gets you recognised as someone who can own operational resilience.

Will it help me land a DORA role?+

It is built to. The programmes are written around the roles banks and insurers are actively hiring for — ICT risk, third-party, incident reporting, TLPT, programme delivery — so your certificate maps straight onto the job descriptions employers publish. Hiring teams are genuinely impressed by candidates who arrive already certified.

How long do I keep access to the material?+

Lifetime access, including updates. Revisit the content whenever you like, at your own pace — useful as the regulation and the technical standards evolve.

What if I do not pass the certification exam?+

You can retake the exam at no additional cost, with feedback on the areas to revisit. Most learners pass on the first attempt after completing the module knowledge checks.

Do you offer pricing for teams?+

Yes. For teams of five or more, write to info@regulation-dora.eu for a tailored quote, including consolidated billing and progress tracking.

Start today

Begin with the free foundation course.

DORA Fundamentals is genuinely free — unlock the whole course with a newsletter signup and earn your first certificate this week.

Talk to an advisor