21 self-paced certification programmes on the Digital Operational Resilience Act, written for the compliance, risk and contract professionals of EU finance. One is free. Every one ends in a credential.
Each course issues a certificate with a unique ID and a QR check on a public verification page, and adds to your LinkedIn profile in one click. Proof your firm, your peers and auditors can trust.
Written by learners who passed the certification exam, published unedited after review.
“Excellent Course and great experience.”
“Clear and on point, without unnecessary lengthy explanations. Relevant for my work. I can recommend.”
“This certification is to the point through providing the necessary background information together with practical examples and useful tips.”
Reviews are from verified certified learners only. We offer 15% off a future purchase for leaving one after a certification, regardless of the rating given; reviews are published unedited.
From a free foundation to expert-tier programmes. Lifetime access, knowledge checks and a PDF certificate on every course.
Master the fundamentals of DORA regulation. Perfect for professionals starting their compliance journey.
“Excellent Course and great experience.”
The complete project-manager certification: run a DORA implementation end to end, scope, governance, all five pillars, evidence and closure.
The client-facing credential for consultants, lawyers and auditors. Scope an engagement, build the client programme, evidence it, and prove your DORA competence with a verifiable certificate you show to clients.
“This certification is to the point through providing the necessary background information together with practical examples and…”
Cyber resilience for the AI era, aligned to DORA. Understand AI-orchestrated attacks (GTG-1002) and superhuman vulnerability discovery (Mythos), apply machine-speed defences, and evidence them against every DORA pillar.
The board-level DORA programme: the management body’s Article 5 duties and personal accountability, approving and challenging the ICT risk framework, reading incident, Register and TLPT reporting, and evidencing effective oversight to supervisors.
DORA from the supplier side: what your financial-sector clients must require of you under Articles 28–30, audit and sub-outsourcing obligations, the CTPP oversight regime, and a reusable DORA-readiness pack to win and keep contracts.
The complete DORA programme for the whole IT and security function: the ICT risk framework, resilience-by-design, detection and incident operations, TLPT, business continuity, and third-party technical oversight, with the evidence supervisors expect.
The build-and-ship DORA programme for the people who write and deploy the software: secure SDLC, controlled change & release, CI/CD and supply-chain security, testing in the pipeline, observability, and resilience-by-design architecture, with the evidence supervisors expect.
The complete DORA programme for legal, contract and procurement teams: the enforcement and liability regime done correctly, Article 30 clauses, re-papering, the Register of Information, outsourcing and exit law, and supervisory engagement.
The dedicated certification for contract, procurement and vendor managers. Master Article 30 clauses, the Register of Information, re-papering and vendor negotiation under DORA.
Deep dive into ICT risk management frameworks, business continuity, and operational resilience.
Master incident classification, reporting workflows, and regulatory communication.
Comprehensive training on managing ICT third-party providers, contracts, and continuous monitoring.
Become a certified TLPT tester. Learn threat-led penetration testing methodologies and best practices.
Design, document and test ICT business continuity and disaster recovery under DORA, from business impact analysis to scenario exercises.
Plan, run and close a DORA programme using ISO 27001 as your roadmap: full DORA↔ISO 27001 control mapping, the regulatory delta, priorities and quick wins.
Complete mastery program for leading organization-wide DORA implementation projects.
The dedicated certification for the role banks and insurers hire first: the obligations map, second-line monitoring, regulatory reporting and supervisory engagement.
Implement DORA on an ISO 27001 ISMS: extend the management system, map all 93 Annex A controls, build the regulatory delta, run one integrated control environment.
Provide independent third-line assurance over DORA: plan the audit by risk, test each pillar, evidence findings and report to the audit committee.
Master DORA’s hardest artefact end to end: the data model, sourcing, critical-function tagging, subcontracting chains, quality and supervisory submission.
Every certification in the Academy: all 21 courses with every exam and verifiable certificate included, lifetime access, plus the Govern & Implement starter pack: 8 professional toolkits to run DORA end to end as your firm’s certified expert.
The second- and third-line career path: own compliance, audit it, and master the Register.
For ISMS-led teams: implement DORA on ISO 27001 and run the programme end to end.
The complete path for the technology function: the team programme plus every technical deep-dive.
The complete path for the delivery function: the build-and-ship programme plus every technical deep-dive for secure, resilient shipping.
The complete path for legal, contract and procurement: the team programme plus every contract deep-dive.
The governance path: board oversight duties, delivery leadership and second-line compliance in one place.
The supplier path: be DORA-ready for your financial clients. Article 30, third-party risk and an ISO 27001 base.
The 13 core individual DORA certifications in one purchase, over 60% off buying them separately. (Team, board & role-specific courses are sold separately.)
Every DORA certification course. Team seat plan, not sold directly.
For banks & credit institutions: second-line compliance, ICT risk, continuity and third-party oversight for the whole team.
For insurers & intermediaries: compliance, ICT risk, incident reporting and third-party oversight, tuned to the insurance operating model.
For payment & e-money institutions: compliance, incident reporting, third-party oversight and continuity for high-availability rails.
For crypto-asset service providers: compliance, ICT risk, threat-led testing and incident reporting for a security-first sector.
For MiFID investment firms: compliance, ICT risk, third-party oversight and the Register of Information for delegation-heavy models.
Each track bundles four role certifications for your sector · buy for one person or as a multi-seat team licence.
Two complete team programmes plus every deep-dive certification, bought as a team, with volume seats and one manager who enrols colleagues and tracks their progress and exam results in one place.
ICT risk framework, detection & incidents, TLPT, continuity, third-party technical oversight.
Penalties done right, Article 30, re-papering, the Register, outsourcing & exit, supervisory engagement.
Article 5 duties & accountability, approving the ICT risk framework, reading the reporting, evidencing oversight.
The supplier side: Article 28–30 flow-down, audit & sub-outsourcing, CTPP oversight, winning client DDQs.
Every lesson cites the DORA articles and the RTS/ITS behind it. You learn the law, not a paraphrase.
Programmes written for the actual job (contract manager, incident specialist, programme manager) not a generic overview.
Lifetime access. Study in the gaps of a working week, on any device, and return whenever the regulation moves.
Knowledge checks in every module and a final certification exam. A credential you earn, not one you buy.
A verifiable PDF certificate with a unique ID and QR check: ready for your CV and LinkedIn.
From free to €249. Professional depth without the four-figure price tag of classroom training.
Self-paced lessons and knowledge checks. Every lesson cites the DORA articles and the RTS/ITS behind it: you learn the law, not a paraphrase.
Each programme ends in a timed, scored exam. Reach the pass mark and your certificate is issued instantly: retakes are allowed.
Your certificate carries a unique ID and a QR check on a public verification page, and adds to your LinkedIn profile in one click.
Absolutely. Banks, insurers and financial institutions across the EU are scaling their DORA capability fast, and increasingly look for exactly this profile. A verifiable DORA credential makes your expertise visible on your CV and LinkedIn, and gets you recognised as someone who can own operational resilience.
It is built to. The programmes are written around the roles banks and insurers are actively hiring for (ICT risk, third-party, incident reporting, TLPT, programme delivery) so your certificate maps straight onto the job descriptions employers publish. Hiring teams are genuinely impressed by candidates who arrive already certified.
Lifetime access, including updates. Revisit the content whenever you like, at your own pace: useful as the regulation and the technical standards evolve.
You can retake the exam at no additional cost, with feedback on the areas to revisit. Most learners pass on the first attempt after completing the module knowledge checks.
Yes. For teams of five or more, write to info@regulation-dora.eu for a tailored quote, including consolidated billing and progress tracking.
DORA Fundamentals is genuinely free: unlock the whole course with a newsletter signup and earn your first certificate this week.