{"id":28656,"date":"2026-07-17T16:19:12","date_gmt":"2026-07-17T16:19:12","guid":{"rendered":"https:\/\/www.stroople.com\/?page_id=28656"},"modified":"2026-07-24T17:04:37","modified_gmt":"2026-07-24T17:04:37","slug":"formation-de-cadres-dora","status":"publish","type":"page","link":"https:\/\/www.stroople.com\/fr\/dora-executive-training\/","title":{"rendered":"Formation DORA pour les Dirigeants : Gouvernance & Conformit\u00e9 Cyber"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

GRC-01<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Cyber Governance for Executives (DORA)\n<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t 0,5<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

day(s)<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t In House<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t On-site <\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

Remote Session<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Training center<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

Paris<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Audience<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

Decision-makers<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Fee<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

On request<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

PRESENTATION & TARGET AUDIENCE<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Understand your role. Limit your exposure.<\/p>

A board of directors or executive committee arbitrates budgets, sets priorities, and makes decisions under pressure in a crisis. If its members lack a basic understanding of cyber risk, the organization’s compliance and its ability to respond to an incident remain fragile, regardless of the resources invested further down the hierarchy. This training is therefore not a box-ticking exercise, it directly determines the strength of the organization’s line of defense.<\/p>

This training is designed for executives, Executive Committee (ExCom) and Board members, and directors of financial entities subject to DORA. It enables participants to identify the main objectives of the regulation and understand its consequences for executive liability.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

PREREQUISITES \n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

No technical or theoretical prerequisites are needed to attend this training.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

LEARNING OBJECTIVES<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The overall pedagogical objective of this training is to enable executives to identify the main objectives of the DORA regulation and understand its consequences for their liability as directors.<\/p>

By the end of this training, participants will be able to:<\/p>

  • Identify the scope of application of DORA and distinguish the type of financial entity concerned and the competent authority their organization falls under, in order to map the risk typologies to which it is genuinely exposed.<\/li>
  • Explain the compliance requirements placed on the management body, and match each family of requirements to the technological and organizational levers available to address it.<\/li>
  • Link the criticality of service providers and the business impact of potential incidents to the priorities of an effective cybersecurity policy.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    TRAINING METHODS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    This training alternates interactive presentations and practical workshops. The introductory module draws on key figures and recent cases to anchor the stakes before addressing the regulations. The following modules are based on hands-on exercises and a contrasting case study leading to a group discussion facilitated by the trainer.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    ASSESSMENT METHOD<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The effective mastery of all the learning objectives will be assessed through a quiz (summative assessment).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    PROGRAMME<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Sequence 1: What DORA concretely means for your organization<\/strong><\/p>

    • Explain the criteria used to qualify the type of financial entity concerned, and identify the competent authority it falls under.<\/li>
    • Describe the most common risk typologies in the financial sector (ICT-related incidents, failure of a critical service provider, cyberattacks), and map the organization’s exposure to each of these risks.<\/li><\/ul>

      Sequence 2: Legal obligations and risks for executives<\/strong><\/p>

      • Explain the obligations Article 5 of the regulation places on the management body (approval, review and oversight of the risk management framework, ongoing training for executives).<\/li>
      • Distinguish sanctions targeting the entity itself from the specific regime applicable to critical third-party ICT providers.<\/li>
      • Describe the risk management requirements forming the core of the regulation (documented framework, incident classification and notification, digital operational resilience testing, third-party risk management).<\/li>
      • Explain the principle of European harmonization through common technical standards, and distinguish the competent authority and sanction calibration specific to each sector (ACPR or AMF depending on the case).<\/li>
      • Identify the resulting notification obligations (deadlines to be met), and define the organization required to meet and sustain them over time.<\/li>
      • Match each family of requirements to its concrete levers: methodological (EBIOS RM), normative (ISO 27001), technological (detection and response, strong authentication, encryption, isolated backups, penetration testing) and organizational (staff training, access governance, contractual clauses for providers, tested continuity plans).<\/li><\/ul>

        Sequence 3: Concrete examples and ROI of an effective cybersecurity policy<\/strong><\/p>

        • Outline the method for mapping and scoring provider criticality, and describe its role as the starting point of a prioritized compliance plan.<\/li>
        • Distinguish the business impact of an unmanaged incident (business interruption, loss of contracts, reputational damage, risk to regulatory authorization) from the cost of a structured approach.<\/li>
        • Explain, using a reading grid, how the risk-reduction impact of a security measure helps determine investment priorities.<\/li><\/ul>

          Updated on 3 July 2026<\/strong><\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

          \n\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\n\t\t\n\t\t
          \n\n\t\t\t

          Training Center<\/h2>\n\t\t\t\t\t\t\t
          \n\t\t\t\t\t

          PARIS
          \n\n\n121 rue d'Aguesseau (centre d'affaires Emergence)
          \n 92 100 Boulogne Billancourt
          \n
          \nRegistered under number: 11922630392.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

          \n\t\t\t\t
          \n\t\t\t\t\t