DORA

We will verify the extent to which DORA applies to your organization and determine whether full implementation of the regulations is necessary or whether it is worth using a simplified process. As part of the DORA implementation, we will also prepare you for NIS2 - if you are subject to the provisions of this directive.

We will help you determine all processes and key resources related to information processing and digital resilience of your organization. We will also focus on processes in which external suppliers (outsourcers) are involved.

We will analyze the risks related to your digital immunity and the processing of information, including personal data. This analysis will be an important element of your Risk Management System and Digital Resilience Strategy.

We will help you choose appropriate solutions in the field of digital immunity and information protection to minimize the associated risks.

We will support your company in developing and implementing appropriate information management standards, including internal communication. We prefer an approach based on ISO standards, adapted to the scale of operations and capabilities of your organization.

We will support you in adapting your organizational structure to the requirements of DORA, as well as the Principles of Corporate Governance for Supervised Institutions and the expectations of the Polish Financial Supervision Authority. In addition to support in the implementation of DORA, we can provide your company with constant support of people responsible for coordinating the implementation of supervisory duties.

We will work together to determine which information you process should be copied as required by DORA or other regulations. We will develop appropriate rules for creating, storing, testing and restoring backup copies. We can also supervise their compliance.

We will help you identify processes that require redundant or backup IT environments. We will develop appropriate procedures and analyzes related to this. At the same time, we will support you in the selection of external suppliers.

We will develop Business Continuity Plans for you, covering not only ICT environments, but also the entire activities of the organization. Together we will select optimal solutions so that your organization is prepared for various scenarios.

We will prepare appropriate procedures and digital resilience testing plans for you, tailored to the size and capabilities of your company and the risks it is exposed to. We can also support you in supervising the implementation of appropriate tests.

We will create incident response plans for you, including incidents classified as significant. Thanks to this, your organization will know how to proceed in the event of an unfavorable event.

We will develop procedures for cooperation with outsourcers and prepare standard contract clauses compliant with DORA and other requirements. Additionally, we can provide support in the constant monitoring of cooperation with external suppliers required by DORA.

We will prepare and conduct required training in the field of information security (including GDPR), digital immunity and risk analysis. We will also provide dedicated training for the Management Board required by DORA. Additionally, we will develop short e-learning that you can use for onboarding new employees and co-workers.