1. DORA Readiness & Gap Assessment

We assess your current policies, controls, and processes against DORA’s requirements, then give you a prioritised remediation roadmap with clear ownership and timelines.

2. ICT Risk Management Framework

We design and implement a framework that covers governance, asset identification, protection and prevention, detection, response and recovery, and continuous improvement.

3. ICT Incident Management & Reporting

We build processes for incident classification, escalation, and regulatory reporting (initial, intermediate, and final reports), so you can meet strict reporting timelines.

4. Digital Operational Resilience Testing

We plan and support your testing programme, from vulnerability assessments and scenario-based tests to Threat-Led Penetration Testing (TLPT) readiness for in-scope entities.

5. ICT Third-Party Risk Management

We help you build and maintain your Register of Information, perform due diligence on providers, review contracts against DORA’s mandatory provisions, and define exit strategies.

6. Governance, Policies & Board Readiness

DORA places direct accountability on management bodies. We prepare policies, reporting structures, and board-level training so leadership can oversee ICT risk with confidence.

7. Information & Threat Intelligence Sharing

We help you establish secure arrangements for exchanging cyber threat information with trusted peers.