What a DORA Project Manager Does
DORA compliance is not understood into existence — it is delivered. The Certified DORA Project Manager owns that delivery: turning the regulation into a plan, the plan into completed work, and the work into defensible evidence.
The gap the role closes
DORA failures are rarely failures of knowledge. The articles are public; the RTS/ITS are published. Entities fall short on execution: a Register of Information half-built when the deadline lands, a testing programme designed but never run, contracts unrepapered because nobody owned procurement. The project manager exists to close that gap.
What you own end to end
Scope
Confirm applicability, set the boundary, define the workstreams.
Plan
Roadmap, schedule, budget, resources, dependencies.
Deliver
Run all five pillars as workstreams; track, chase, unblock.
Evidence & close
Audit-ready evidence, transition to BAU, clean closure.
Director, programme, project
| Implementation Director | Project Manager (CDPM) | |
|---|---|---|
| Question | Are we doing the right things? | Are we doing things right, on time, with evidence? |
| Owns | Mandate, sponsorship, outcome | The plan, the delivery machine, the evidence trail |
Why DORA is a delivery challenge, not a legal one
The Digital Operational Resilience Act (Regulation (EU) 2022/2554) has applied since 17 January 2025. The articles and the delegated acts — the RTS and ITS — are public. Yet more than a year into supervision, entities still fall short, and almost never for want of understanding. They fall short because a multi-function, deadline-bound programme was under-owned: no single person held the plan, chased the blockers and banked the evidence. That is precisely the gap the project manager exists to close, and why this role is distinct from the lawyer who interprets DORA or the CISO who runs the controls.
Worked example. A payment institution engages a project manager «to sort out DORA». She converts the brief into a charter, a gap analysis and five workstreams with named owners. Six weeks later the entity answers a supervisory information request cleanly — not because it did more work than a struggling peer, but because the work was owned, sequenced and evidenced by one accountable delivery lead.
That was your free preview
Enrol to unlock all 35 lessons, every knowledge check, the dedicated certification exam, the downloadable toolkit and your verifiable certificate — lifetime access.
Secure payment via Stripe · 30-day money-back guarantee.