{"id":11389,"date":"2026-07-01T13:36:20","date_gmt":"2026-07-01T11:36:20","guid":{"rendered":"https:\/\/www.ozonaconsulting.com\/dora-audit-2\/"},"modified":"2026-07-01T13:36:20","modified_gmt":"2026-07-01T11:36:20","slug":"dora-audit","status":"publish","type":"page","link":"https:\/\/www.ozonaconsulting.com\/en\/dora-audit\/","title":{"rendered":"DORA \u00b7 Internal Audit"},"content":{"rendered":"

[vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” background_color=”#e8e8e8″ padding_top=”70″ padding_bottom=”50″ css=”.vc_custom_1443952192133{background-color: #ffffff !important;}”][vc_column][vc_row_inner row_type=”row” type=”grid” text_align=”left” css_animation=””][vc_column_inner][vc_column_text]<\/p>\n

DORA Training \u00b7 Internal Audit<\/h2>\n

 <\/p>\n

The Regulation (EU) 2022\/2554 (DORA) establishes a European regulatory framework that strengthens the digital operational resilience of financial sector entities, addressing ICT risk management, incident management, operational resilience testing, third-party management and information sharing.<\/p>\n

This training has been specifically designed for internal audit teams of financial entities, covering the planning, execution and reporting of audits on the five pillars of DORA. The contents are based on the experience of Ozona Consulting’s team of consultants in real implementation and audit projects on ISO 22301, ISO 27001 and ISO 20000, on the articles of the DORA regulation and on its Regulatory Technical Standards (RTS).<\/p>\n

The course is useful for internal audit teams and for any profile involved in the adoption, management and governance of DORA within the entity.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” padding_top=”10″ padding_bottom=”10″][vc_column][vc_row_inner row_type=”row” type=”full_width” text_align=”left” css_animation=””][vc_column_inner][vc_column_text]<\/p>\n

KEY FEATURES OF THE COURSE<\/span><\/h2>\n

[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space][vc_row_inner row_type=”row” type=”grid” text_align=”left” css_animation=””][vc_column_inner width=”1\/3″]

<\/i><\/span><\/div>

PRACTICAL APPROACH<\/h3>

Audit programme applied to the five pillars of DORA, with real cases and examples.<\/p><\/div><\/div><\/div>[\/vc_column_inner][vc_column_inner width=”1\/3″]

<\/i><\/span><\/div>

INTERNAL AUDIT FOCUSED<\/h3>

Designed specifically for internal audit teams of financial entities.<\/p><\/div><\/div><\/div>[\/vc_column_inner][vc_column_inner width=”1\/3″]

<\/i><\/span><\/div>

BASED ON THE REGULATION AND RTS<\/h3>

Contents based on the DORA articles, its Regulatory Technical Standards and good practice guides.<\/p><\/div><\/div><\/div>[\/vc_column_inner][\/vc_row_inner][vc_empty_space][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” background_color=”#e8e8e8″ padding_top=”70″ padding_bottom=”50″][vc_column][vc_row_inner row_type=”row” type=”grid” text_align=”left” css_animation=””][vc_column_inner][vc_column_text]<\/p>\n

TARGET AUDIENCE<\/span><\/h2>\n

[\/vc_column_text][vc_empty_space height=”15px”][vc_column_text]<\/p>\n

    \n
  • Internal audit teams of financial entities<\/li>\n
  • Auditors with responsibilities for DORA compliance<\/li>\n
  • ICT risk, compliance and governance officers<\/li>\n
  • Digital operational resilience officers<\/li>\n
  • Profiles involved in the adoption and governance of DORA within the entity<\/li>\n<\/ul>\n

    Prior knowledge of DORA fundamentals recommended. Intermediate level.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” padding_top=”70″ padding_bottom=”50″][vc_column width=”1\/6″][vc_empty_space][\/vc_column][vc_column width=”2\/3″][vc_column_text]<\/p>\n

    COURSE DETAILS<\/span><\/h2>\n

    [\/vc_column_text][vc_column_text]<\/p>\n

    DURATION AND FORMAT<\/h3>\n

    12 hours distributed across 4 sessions of 3 hours<\/strong> (or 3 sessions of 4 hours), in live online or on-site format. Available in multi-client or in-company format.<\/p>\n

     <\/p>\n

    LANGUAGE AND MATERIALS<\/h3>\n

    Course in Spanish, materials in Spanish (PDF manual; printed copy optional).<\/p>\n

     <\/p>\n

    CERTIFICATE<\/h3>\n

    Attendance certificate upon completion.<\/p>\n

     <\/p>\n

    WHAT IS INCLUDED?<\/h3>\n
      \n
    • Training<\/li>\n
    • Course manual in electronic PDF format<\/li>\n
    • Attendance certificate<\/li>\n<\/ul>\n

      [\/vc_column_text][vc_empty_space height=”15px”][\/vc_column][vc_column width=”1\/6″][vc_empty_space][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” padding_top=”70″ padding_bottom=”50″][vc_column width=”1\/6″][vc_empty_space][\/vc_column][vc_column width=”2\/3″][vc_column_text]<\/p>\n

      COURSE PROGRAMME<\/span><\/h2>\n

      12 hours distributed across 4 sessions of 3 hours each.<\/p>\n

      [\/vc_column_text][vc_empty_space height=”15px”][vc_accordion collapsible=”yes” style=”accordion” disable_keyboard=””][vc_accordion_tab title=”SESSION 1 \u00b7 INTRODUCTION TO THE DORA REGULATION (3 HOURS)” title_tag=”h4″][vc_column_text]<\/p>\n

        \n
      • Context of the EU Digital Finance Package<\/strong>: EU digital financial environment and the need for a regulatory framework such as DORA.<\/li>\n
      • Objectives and timeline of the DORA Regulation<\/strong>: main goals, implementation deadlines and obliged entities.<\/li>\n
      • Consequences of non-compliance<\/strong>: sanctions, audits, reputational and financial risks.<\/li>\n
      • The five pillars of DORA<\/strong>: ICT risk management, incident management, operational resilience testing, third-party management and information sharing.<\/li>\n
      • Policy instruments related to DORA<\/strong>: relationship between legal and regulatory instruments and the organisation’s internal policies.<\/li>\n<\/ul>\n

        [\/vc_column_text][\/vc_accordion_tab][vc_accordion_tab title=”SESSION 2 \u00b7 IMPACT OF DORA ON INTERNAL AUDIT (3 HOURS)” title_tag=”h4″][vc_column_text]<\/p>\n

          \n
        • Direct requirements of DORA for internal audit<\/strong>: how DORA affects planning, execution and reporting of audits.<\/li>\n
        • Other implications<\/strong>: necessary adjustments to internal processes and policies to ensure compliance.<\/li>\n
        • Training and skills development<\/strong>: new competences that internal auditors must acquire, including ICT risk management and operational resilience.<\/li>\n<\/ul>\n

          [\/vc_column_text][\/vc_accordion_tab][vc_accordion_tab title=”SESSION 3 \u00b7 AUDIT PROGRAMME FOR DORA (3 HOURS)” title_tag=”h4″][vc_column_text]<\/p>\n

            \n
          • Audit planning<\/strong>: structuring the plan to address the five pillars of DORA.<\/li>\n
          • Audit tests<\/strong>:\n
              \n
            • Digital operational resilience of the organisation.<\/li>\n
            • Identification and review of critical and important functions.<\/li>\n
            • Audit of recovery plans for ICT incidents.<\/li>\n
            • Incident management and notification process to regulators.<\/li>\n
            • ICT audits: controls and system security.<\/li>\n
            • Penetration testing: review of effectiveness on ICT infrastructure.<\/li>\n<\/ul>\n<\/li>\n
            • Outsourcing risk management<\/strong>: supervision of external ICT service providers and compliance with DORA.<\/li>\n<\/ul>\n

              [\/vc_column_text][\/vc_accordion_tab][vc_accordion_tab title=”SESSION 4 \u00b7 CONTINUOUS IMPROVEMENT AND CLOSURE (3 HOURS)” title_tag=”h4″][vc_column_text]<\/p>\n

                \n
              • Governance and organisation<\/strong>: assessment of the governance structure in relation to digital operational resilience.<\/li>\n
              • ICT risk management<\/strong>: audit of the process for identifying, analysing and mitigating risks.<\/li>\n
              • ICT incident management<\/strong>: classification, reporting and analysis according to DORA thresholds.<\/li>\n
              • Digital operational resilience testing<\/strong>: testing programme, penetration tests and crisis simulations.<\/li>\n
              • Third-party ICT providers<\/strong>: review of the provider management framework to ensure compliance.<\/li>\n<\/ul>\n

                [\/vc_column_text][\/vc_accordion_tab][\/vc_accordion][\/vc_column][vc_column width=”1\/6″][vc_empty_space][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” background_color=”#ffffff” padding_top=”70″ padding_bottom=”50″][vc_column][vc_column_text]<\/p>\n

                Request information about the DORA internal audit training<\/span><\/h2>\n

                [\/vc_column_text][vc_separator type=”normal” transparency=”0″ align=”align_center”][vc_row_inner row_type=”row” type=”grid” text_align=”left” css_animation=”” css=”.vc_custom_1536054851436{margin-top: 20px !important;}”][vc_column_inner][vc_empty_space][vc_column_text]\n

                \n

                <\/p>

                  <\/ul><\/div>\n
                  \n
                  \n<\/fieldset>\n

                  Interested in an in-company session<\/span><\/span>Other editions<\/span><\/span><\/span><\/span>\n<\/p>\n

                  <\/span>\n<\/p>\n

                  <\/span>\n<\/p>\n

                  <\/span>\n<\/p>\n

                  <\/span>\n<\/p>\n

                  <\/span>\n<\/p>\n

                  <\/span>\n<\/p>\n