Updated October 2026
The scenario
"It is 9:15. Your critical provider becomes unavailable. Client data may have been compromised."
What do you do in the first 15 minutes? Who decides? Who reports, and to whom? Where is the contract, and what does it say?
What the workshop covers
- Incident management: classification, escalation, notification deadlines.
- ICT risk management framework: roles, responsibilities, chain of decision.
- Critical ICT providers: contracts, exit clauses, continuity plans.
- Coordination: Risk, Compliance, business and IT around one table.
Why now
DORA is applicable. Supervisors focus their checks on incident management, ICT risk management frameworks and the compliance of contracts with IT providers. A crisis exercise reveals blind spots that no presentation can.
Formats and audience
- Essentials, 90 minutes: DORA reflexes for a large population, no technical jargon.
- Professional Workshop, half a day: the full simulation, adapted to your organisation and providers. Audience: Risk, Compliance, business, IT, procurement.
Evidence Pack: documenting the work done
Each session can come with a file of evidence for the company: an attendance record, a knowledge check, a training record and the programme delivered. These elements document the training carried out. They are neither an official certification nor a guarantee of regulatory compliance.