📢 Structure update - effective 2026: A new DORA General Training has been introduced as the mandatory baseline for all employees, valid for the full year. ICT modules continue as quarterly boosters. DORA 1, 2, and 3 are now Expert Modules - see the bottom of this page. All previously completed trainings remain valid.

💡 What is a booster? Boosters are shorter, focused training modules released each quarter to keep security awareness fresh. They are recommended for all employees alongside the mandatory DORA General Training.

🎯 What is an Expert Module? Expert Modules (DORA 1, 2, 3) are in-depth, technical trainings for employees whose role carries DORA-related risk, compliance, or incident-response responsibilities - not for general staff. Unlike boosters, they aren't tied to a quarter - they're available on request, any time, and are best completed in order (1 → 2 → 3) since each builds on the previous one.

🗓 Availability: The DORA General Training is available year-round. Quarterly ICT boosters become available within the first two weeks of each quarter.

🗓 DORA General Training — Mandatory for All Employees (Full Year 2026)

[TRAINING] DORA General Training

• What is DORA and why it matters
• The five pillars of digital operational resilience
• What DORA means for your organisation and your role
• Key obligations for all employees under DORA

✅ Mandatory for all employees | Valid: 1 Jan - 31 Dec 2026 | Available immediately, accessible at any time throughout the year

🗓1 Quarterly ICT Boosters (2026)

Recommended for all employees alongside the mandatory DORA General Training. Not mandatory. Released within the first two weeks of each quarter.

2026'Q1 (1 Jan – 31 Mar 2026)

[TRAINING] ICT 1: Foundation & General Security Awareness V2

Booster - Q1

• Cybersecurity Threat Landscape
• Insider Threat Awareness
• Password Security
• Phishing and Social Engineering Awareness

[TRAINING] ICT 2: Acceptable Use, Behaviour & Communication Security

Booster - Q1

• Acceptable Use
• Social Media Security
• Email and Communication Security
• Secure Use of LLMs

2026'Q2 (1 Apr – 30 Jun 2026)

[TRAINING] ICT 3: Endpoint, Workstation & Malware Protection

Booster - Q2

• Anti-Malware and Ransomware Protection
• Clean Desk and Clean Screen
• Removable Media
• Secure Mobile Device Usage

[TRAINING] ICT 4: Remote, Mobile & Travel Security

Booster - Q2

• Remote Work Security
• Information Security When Traveling