DORA Boardroom Training

DORA Boardroom Training

Attention all boardroom members in the financial sector: DORA will come into effect in January 2025. Does the Digital Operational Resilience Act (DORA) apply to your organization? From that moment on, you are legally responsible for cyber security within your organization.

You are required to have knowledge of cybersecurity, so that you can communicate it correctly. To meet this requirement, the regulation expects you to follow cybersecurity training.

De Clercq Lawyers and Secura are committed to helping you comply with these training demands of DORA. During our DORA Boardroom Training, you will learn how to protect your organization's digital infrastructure against cyber threats. After this 1-day training, you will meet the training requirements of DORA and receive a certificate.

The DORA Boardroom Training is a collaboration between De Clercq Lawyers and Notary and Secura's cybersecurity experts.

Why the DORA Boardroom training?

• Comply with the DORA obligation for directors to obtain sufficient knowledge of the subject.
• Acquire sufficient knowledge and skills to identify security risks.
• Learn basic cyber hygiene practices.
• Gain insight into the cybersecurity risk management measures that organizations must take as a minimum based on DORA.
• Acquire sufficient knowledge and skills to assess appropriate and proportionate technical, operational and organizational risk management measures.
• Gain sufficient knowledge to limit the consequences of security incidents.

Target group: directors

Are you a director supervising compliance with the legal obligations arising from DORA? Then this training is designed for you. You can follow this training together with the Chief Information Security Officer (CISO) or other person(s) responsible for cyber security, so that you better understand each other's knowledge and responsibilities.

After this course, you as a director can better approve risk management measures and monitor compliance. You can also follow the session with the entire board.

Program DORA Boardroom Training

The training covers one day from 9:00 AM - 4:00 PM at a location of your choice. Alternately, legal and cybersecurity experts provide the modules.

If your CISO is present, you can immediately enter into a dialogue with them. In that case the training will be able to focus on specific issues within your organization. After completing the training, each participant will receive a certificate.

Start at 9:00 am

Module 1: Introduction to DORA

• What is DORA?
• Who does DORA apply to?
• What does DORA mean for organizations and their administrators?
• As a director, how can you monitor compliance?
• Timeline of DORA
• Relationship of DORA to other laws and regulations

Module 2: Dealing with cyber risks

• Cyber ​​crime and cyber risks
• How do you identify cybersecurity risks?
• When is information security appropriate from a legal and cybersecurity perspective?

Module 3: You have been attacked, now what?

• Incident response in practice
• Business continuity in practice
• Importance of legal in incident response
• Ransomware payments

Module 4: Testing operational resilience

• Application and infrastructure testing
• Physical testing
• Business continuity and disaster recovery
• Crisis Management

Module 5: Supply chain security

• Importance of cybersecurity in the supply chain
• How do you ensure cyber security in the supply chain?
• Legal points of interest regarding contractual reporting obligations and audit rights

Module 6: Governance and organization

• Responsibilities board
• Responsibilities supervisory board

3:15 pm Questions

3:45 pm Wrap up

4:00 pm End

Location

In company

About De Clercq and Secura

De Clercq Lawyers and Notary specializes in IT, Privacy & Cybersecurity. The team can assist you with a wide range of legal issues related to cybersecurity, including cybersecurity regulations.

Secura is a leading cybersecurity expert. Our customers range from government and healthcare to finance and industry worldwide. Secura offers technical services, such as vulnerability assessments, penetration testing and red teaming. We also provide certification for IoT and industrial environments, as well as audits, forensic services and awareness training. Our goal is to raise your cyber resilience.