Building Lindqvist Capital's DORA and NIS2 resilience program up the eight-step resilience staircase — scope and applicability, ICT risk framework, critical functions, incident reporting, resilience testing, third-party ICT risk, information sharing and board sign-off; an impact tolerance for payment settlement approved at four hours but never tested, until a real outage ran eighteen hours; and six supervisor findings turned into fixes, from a payments arm that thought DORA was only for banks and three weeks of reporting silence to a missing cloud exit plan and a one-line green board report.

CY-SENIOR-059Senior Level · Digital Operational Resilience

Digital Operational Resilience — DORA & NIS2 Program — The Resilience Staircase

A senior program-level course that builds the digital operational resilience program a supervisor can actually test. Climb the resilience staircase - eight steps: Scope & Applicability, ICT Risk Framework, Critical Functions, Incident Reporting, Resilience Testing, Third-Party ICT Risk, Information Sharing, and Board Accountability - across DORA, NIS2, TIBER-EU, and UK FCA/PRA requirements, with real scope registers, framework mapping, impact tolerances, incident-reporting workflows, TLPT scoping, third-party registers, and board packs. Four hands-on activities in every lesson, built from real program artifacts, not shell commands.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Scope a group's entities, functions, and ICT third parties correctly against DORA and NIS2, applying proportionality and mapping UK FCA overlap.
Build and evidence a management-body-owned ICT risk management framework mapped to, not duplicating, ISO 27001/NIST CSF.
Name critical/important functions, map their dependencies, and test board-approved impact tolerances against realistic scenarios.
Run a compliant program for incident reporting, resilience testing including TLPT, third-party governance, information sharing, and board accountability.

Price:৳10,000