Regulation (EU) 2022/2554 (DORA) – Policy 12 – Secure Development Lifecycle Policy

This course turns the ICT Risk Management Policy into an operational playbook for real-world implementation. It focuses on governance responsibilities, control expectations, and the evidence auditors use to validate compliance. Participants will leave with a clear understanding of what to document, who must approve what, and how to maintain traceability across decisions, changes, and reviews.

In this course, you should learn to:

• Explain the regulatory intent and operational outcomes expected from the ICT Risk Management Policy.
• Identify roles, decision rights, and escalation paths required for effective governance.
• Define the minimum evidence trail needed to prove implementation, approvals, and exceptions.
• Apply the policy in practice through repeatable workflows, monitoring, and periodic review..

Build practical, auditable implementation of the ICT Risk Management Policy across governance, operations, and oversight. Learn how to create evidence trails that demonstrate real compliance under DORA expectations.

• Compliance
• Internal Audit
• Risk Management
• Operational Resilience
• IT Security
• Executive Management

35-50 minutes