What is covered on Day 3 of the DORA Lead Manager course?
Day 3 covers resilience testing, ICT third-party risk management, oversight frameworks, and information sharing.
Day 3 focuses on managing external dependencies and validating resilience. The agenda covers digital operational resilience testing, which assesses an organization’s ability to withstand ICT disruptions.ICT third-party risk management is addressed in detail, including oversight of service providers and understanding the role of the Lead Overseer.The day also covers information and intelligence sharing, highlighting how collaboration contributes to sector-wide resilience.These topics reflect DORA’s emphasis on external risk and validation beyond internal controls.
Related Information
- Day 3 focuses on resilience testing.
- ICT third-party risk management is a core topic.
- Oversight frameworks support regulatory control.
- Information sharing improves resilience.
- External dependencies are emphasized.
Expert Insight
Third-party dependencies are often the weakest link in resilience programs.Testing reveals gaps that documentation alone cannot.
“Resilience depends on testing and third-party oversight.”
Topics
What's next?
Explore related training
Browse all: Governance, risk & complianceLead Operational Resilience Manager
This course prepares participants to design, implement, test, and improve an operational resilience management framework. It addresses the growing pressure to maintain critical services through cyber incidents, supplier failures, technology outages, regulatory scrutiny, and physical disruptions. Participants learn how to identify critical business services, set impact tolerances, assess risk, and coordinate response and recovery decisions. Abilene Academy teaches through consultant-led case work, realistic evidence review, and exam-focused coaching built from field practice. It is designed for resilience leaders, risk managers, business continuity professionals, internal consultants, and managers responsible for disruption readiness.
View courseNIS 2 Directive Lead Implementer
The NIS 2 Directive Lead Implementer is a 4-day PECB certification training program that equips professionals to implement a cybersecurity program compliant with the EU NIS 2 Directive. Participants sit the official PECB NIS 2 Lead Implementer certification exam at the end of the course.
View courseISO 22301 Lead Implementer
This intensive 4-day training prepares participants to implement and manage a Business Continuity Management System (BCMS) compliant with ISO 22301:2019. It covers planning, deployment, monitoring, updates, and continual improvement, with a focus on context analysis, business impact analysis, risk.
View courseMore from DORA Lead Manager
How is the DORA Lead Manager course delivered?
The course combines lectures with real-case examples, case-study-based exercises, review activities, and a practice test aligned with the certification exam.
What is DORA and who does it apply to?
DORA is an EU regulation focused on digital operational resilience in financial entities. It applies to financial institutions and certain ICT service providers.
What are the five pillars of DORA?
The five pillars are ICT risk management, ICT incident management, digital operational resilience testing, ICT third-party risk management, and information sharing.
How is the DORA Lead Manager exam structured?
The exam is delivered online, lasts three hours, and covers five domains aligned with ICT risk, incident management, resilience testing, and continual improvement.
Further reading
NIS 2 Directive: The Complete Compliance Guide for European and UK-Connected Businesses (2026)
The NIS 2 directive (Directive (EU) 2022/2555) is the EU's flagship cybersecurity framework, applying to around 110,000-160,000 entities across 18 sectors.
DORA Regulation: The Complete Compliance Guide for Financial Institutions (2026)
DORA imposes a harmonized European framework for digital operational resilience on the financial sector since 17 January 2025. Complete guide: five pillars, FINMA, NIS 2, sanctions.
Browse all FAQs →
Full knowledge base