• Governance Policies and Gap Analysis

  Understand where you stand and close the gaps.

  We assess your existing ICT governance framework against DORA requirements:

  • Mapping of existing policies and controls to DORA Articles 5–15
  • Development or revision of governance documentation (ICT strategy, risk management, incident reporting, etc.)
  • Cross-reference to regulator circulars and your ISMS
  • Delivery of a prioritized remediation plan and improvement roadmap

  You gain a clear overview of DORA readiness and the practical steps to achieve full alignment.

• DORA Strategy

  Turning compliance into resilience.

  We help you design a strategic and proportional approach to digital resilience that integrates into your corporate governance and IT operations:

  • Definition of ICT objectives, roles, and oversight structures
  • Strategic alignment with business continuity and risk frameworks
  • Establishment of regular management reporting and board oversight
  • Long-term DORA roadmap integrated into your ISMS improvement plan

  Your DORA strategy becomes a living governance instrument, not a one-time project.

• Proportionality Analysis

  Compliance scaled to your business size and complexity.

  Not every entity faces the same DORA obligations. We conduct a proportionality analysis to ensure your controls are right-sized and efficient:

  • Determination of your DORA applicability and risk classification
  • Documentation of proportionality justification (scope, systems, dependencies)
  • Validation with internal/external auditors or regulator feedback when required

  This ensures your compliance efforts are adequate, documented, and cost-effective.

• Third-Party ICT Provider Management and Due Diligence

  Visibility and accountability across your ICT supply chain.

  We help implement DORA-aligned third-party governance, from initial due diligence to ongoing monitoring:

  • Creation and maintenance of ICT Third-Party Register — Ready for submission to your regulator
  • Supplier risk assessment and control evaluation
  • Due diligence templates and evidence collection procedures
  • Contract review and SLA alignment with DORA requirements
  • Reporting of critical dependencies and subcontractor chains

  Our methodology integrates supplier management into your overall resilience and compliance ecosystem.

• Resilience Testing: Technical Implementation and Evidencing

  Resilience must be provable

  We assist in implementing and evidencing technical resilience tests in line with DORA’s expectations:

  • Definition of test scope, objectives, and frequency
  • Design of tabletop, technical, and scenario-based tests
  • Evidence documentation and reporting templates for audit
  • Integration of test results into your continuous improvement cycle and risk matrix

  Resilience testing becomes a repeatable and verifiable process, supporting both internal assurance and external audits.

• Incident Management and Reporting

  Structured detection, response, and escalation — with evidence to match.

  We help define and automate your incident management lifecycle to meet DORA reporting requirements:

  • Classification and severity determination aligned with Annex II
  • Definition of detection, containment, and reporting workflows
  • Integration with SIEM, ticketing, and communication tools
  • Preparation of incident reporting templates and post-incident review reports

  Our framework ensures every incident is handled, reported, and learned from — transparently and consistently.

• Audit Preparation and Support

  Be ready when auditors or regulators arrive.

  We prepare you for external reviews by ensuring all controls, evidence, and reporting structures are audit-ready:

  • Review of audit scope, sampling, and evidence requirements
  • Documentation mapping between DORA, Industry Best-Practices, and regulator obligations
  • Assistance with internal and external audit interviews
  • Preparation of post-audit remediation plans

  With Aginion’s support, audits become a confirmation of readiness, not a source of stress

Interested in more details or a custom quote?