Trainings and workshops on ICT risk management

Members of the management body require sufficient knowledge to assess ICT risks and their potential impact and to fulfil their governance and oversight responsibilities.

Possible topics include:

• responsibilities of the management body under DORA
• governance and the ICT risk control function
• the digital operational resilience strategy
• risk tolerance, indicators and management reporting
• ICT-related incidents and regulatory notification requirements
• ICT business continuity and recovery
• digital operational resilience testing
• risks arising from the use of ICT third-party service providers

For ICT Risk Managers, ICT Risk Controllers, Information Security Officers, IT managers and other relevant functions, we cover topics such as:

• establishing the ICT risk management framework
• identifying and assessing ICT risks
• classifying information and ICT assets
• treating and accepting risks

• developing controls and mitigation measures
• monitoring ICT third-party service providers
• documentation and reporting requirements
• distinguishing between operational implementation, independent control and internal audit

Employees learn, for example, how to:

• recognise ICT risks and security incidents
• follow internal reporting and escalation procedures
• respond appropriately to system failures and cyberattacks

• protect information, systems and access credentials
• perform their responsibilities during emergencies and business disruptions