QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Climbing Aurelius Group's obligation register from a spreadsheet of copied paragraphs to a regulator-defensible system: the supervisory finding CAA-2026-F07 that DORA articles 28 to 30 on ICT third-party risk were mapped to no control, traced to a legacy register of 4,012 copied paragraphs from 61 sources; an atomic obligation record such as OB-DORA-28-03; and the eight-step staircase of sources, extraction, interpretation, applicability across 12 legal entities, control mapping, ownership, change monitoring and regulator evidence, topped by a defensibility pack that answers a supervisor inside five working days.
CY-EXPERT-053Expert Level · Compliance Management

Obligation Register Defensibility — The Obligation Staircase

An expert-level course that builds and evidences an obligation register a supervisor will accept. Climb the Obligation Staircase - eight steps from Regulatory Source Inventory & Horizon through Obligation Extraction, Interpretation, Applicability, Control Mapping, Ownership & Attestation and Change Monitoring to Regulator Evidence & Program Optimisation - as Mirela Voicu rebuilds Aurelius Group's 4,000-row spreadsheet of copied paragraphs after a supervisory finding that DORA ICT third-party obligations were mapped to no control, and assemble every component into a regulator-defensible Obligation Register Defensibility Pack.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Build a controlled source inventory and horizon log, and extract atomic, cited and classified obligations that replace copied-paragraph registers.
  • Document interpretation, proportionality and dissent in approved memos, and decide applicability for every obligation against every legal entity including group-level duties and outsourcing flows.
  • Map obligations to policies, controls and tests with coverage measured on tested, effective controls, and put a named owner, overseer and evidenced attestation with escalation behind every duty.
  • Run regulatory change management with impact assessments and measured lead time, answer supervisors with an end-to-end evidence pack, and govern the register with quality metrics and a costed RegTech roadmap.

Price:৳12,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.