01
Article 13(6) — financial entities must include ICT-related awareness and resilience training as compulsory staff training, with documented evidence
DORA Compliance Training
Done-for-you DORA training for your financial services team
We deliver mandatory DORA training across your workforce — ICT risk management, third-party ICT risk, incident reporting, digital operational resilience testing, and threat-led penetration testing. Managed rollout, audit-ready evidence accepted by EBA, ESMA, EIOPA, and national supervisors. Live for your team in under a week.
- 100,000+ professionals trained
- Audit-ready (EBA, ESMA, EIOPA)
- Live for your team in 5 business days
admin.compliquest.com / dora / training
DORA Programme · Q2 2026
Training completion overview
847
Enrolled
92%
Completed
4.8★
Rating
0
Overdue
All Employees
All Employees
100%
ICT & Security Teams
ICT & Security Teams
96%
Third-Party Risk
Third-Party Risk
88%
Management Body
Management Body
74%
Audit-ready
Article 39 met
Records signed & timestamped
Certificate Issued
847 employees
4-WEEK ROLLOUT
RocheCoca-ColaSamsungHuaweiMicrosoftJPMorgan ChaseVolkswagenShellNestléSiemensBMWUnileverAXALufthansaPfizerAdidasRocheCoca-ColaSamsungHuaweiMicrosoftJPMorgan ChaseVolkswagenShellNestléSiemensBMWUnileverAXALufthansaPfizerAdidas
// why teams choose us
Why DORA training is mandatory — not optional
DORA Article 13(6) explicitly requires financial entities to develop ICT-related awareness programs and digital operational resilience training as compulsory modules in their staff training schemes. Article 5 makes the management body responsible for the ICT risk-management framework — and personally accountable. The regulation applies to ~22,000 financial entities across the EU plus their critical ICT third-party providers, with no transitional carve-outs after 17 January 2025.
02
Article 5 — management bodies are personally accountable for the ICT risk-management framework and its training components
03
Article 14 — communication strategies for ICT incidents require staff trained on internal and external escalation
04
Article 28 — third-party ICT risk obligations cascade training requirements to your critical providers
02 — Curriculum
Role-based
by default.
Different roles face different risks. Training tailored to job responsibilities.
- 01All Employees
All Employees
- 02ICT & Security Teams
ICT & Security Teams
- 03Third-Party Risk
Third-Party Risk
- 04Management Body
Management Body
- 05Incident Response
Incident Response
- 06ICT Third-Party Providers
ICT Third-Party Providers
03 — Process
From kickoff to fully trained in under four weeks.
4
weeks avg.
92%
completion
- Week 1 · Discovery
Scope your risk
A 60-min working session with a specialist. We map your obligations, current training gaps, and regulator priorities in your jurisdiction.
- Compliance scan
- Regulator review
- Role-based gap analysis
- Week 2–3 · Build
Tailor & integrate
Your processes, contacts, and policies go into the modules. We brand the LMS, wire SSO, and connect HRIS so enrolment is automatic.
- Custom scenarios
- White-label LMS
- HRIS / SSO sync
- Week 4+ · Operate
Deploy & evidence
Roll out to all staff. Automated nudges hit non-completers. Manager dashboards in real time. Audit-ready records when regulators ask.
- Automated nudges
- Real-time dashboards
- Evidence pack
Ready to scope your programme?
Book a 30-min discovery call — no slides, no pitch, just specifics.
// platform & delivery
What every enterprise rollout includes
Managed rollout in 5 business days
Dedicated customer success manager handles enrolment, role mapping, kickoff communications, and reminder cadence.
Article 13(6) audit-ready evidence
Dated certificates per learner, exportable completion logs, and management-body training records that meet supervisor documentation expectations.
Manager dashboard & reporting
Track completion across teams, business lines, and ICT third-party providers. Export evidence packages for EBA, ESMA, EIOPA, and national authorities.
Single sign-on (SSO) & SCIM
SAML 2.0, OIDC, and SCIM provisioning. New joiners enrolled automatically. Leavers de-provisioned. Zero admin overhead.
Annual refresher cycle built-in
Multi-year licensing rolls learners forward each year with content updates as ESAs publish technical standards (RTS/ITS) and supervisor guidance.
Custom modules & policy attestations
Your logo on certificates, co-branded learner emails, and the option to attach your ICT risk policy, incident response plan, or third-party register procedure to any module.
// from a customer
DORA enforcement landed in January 2025 and we needed Article 13(6) training documented across the entire workforce within weeks. The managed rollout delivered audit-ready evidence — and the management-body briefing covered Article 5 personal-liability points exactly the way our board needed.
GC
Group CISO, JPMorgan Chase
Banking — 1,200+ employees trained
★★★★★
// by the numbers
1%
of average daily worldwide turnover
Jan 2025
DORA enforcement is live
Personal
liability for management body members
// frequently asked
Common questions.
Don't see your question? Send us a note — we usually reply same day.
Ask a questionYes — Article 13(6) of Regulation (EU) 2022/2554 explicitly requires financial entities to develop ICT-related awareness programs and digital operational resilience training as compulsory modules in their staff training schemes, with proportionality applied to entity size and risk profile. The regulation has applied since 17 January 2025 with no transitional period for staff training. Supervisors expect documented evidence on first audit.
Ready when you are
Ready to brief us on your team rollout?
Tell us your entity type (credit institution, payment, investment, insurer, CASP, ICT TPP), your DORA proportionality category, and your headcount. We'll come back with a curriculum proposal, pricing, and a rollout plan within 1 business day.
// programme summary
Time to deploy
4 weeks
Audience
All staff + role tiers
Languages
12 included
Updates
Quarterly, automatic
Pricing
Contact us for a quote