IBITGQ C-DORA

IBITGQ Certified DORA (C-DORA)

More study resources

About this exam

The IBITGQ Certified DORA (C-DORA) qualification is a personnel certification offered by the International Board for IT Governance Qualifications (IBITGQ), a personnel certification body that certifies individuals in the field of IT governance. IBITGQ states that it is dedicated to the provision of qualifications to experts working in information security, business resilience and IT governance, and that it offers accredited qualifications recognised on a global basis, guidelines for organisations wishing to offer training courses based on IBITGQ certifications, and guidance on continued professional development. IBITGQ also states that it has demonstrated compliance with ISO/IEC 17024:2012 and is ISO/IEC 17024:2012 accredited by IAS, noting that the scope of that accreditation covers its Certified ISO 27001 ISMS Lead Implementer and Certified ISO 27001 ISMS Lead Auditor certification schemes. The qualification sits in IBITGQ's cyber security and DORA-related exam portfolio and is aimed at professionals who need to understand the EU Digital Operational Resilience Act and how it applies to ICT risk, incident reporting, resilience testing and third-party risk. Preparation is typically through an IBITGQ-accredited training provider, supported by IBITGQ's published guidance on continued professional development. Candidates should confirm current exam logistics and the precise syllabus directly with IBITGQ or their training provider, because the publicly available source material does not state them.

What you'll study

Common questions

About IBITGQ C-DORA preparation

Who issues the C-DORA certification?

IBITGQ, the International Board for IT Governance Qualifications, describes itself as a personnel certification body that certifies individuals in the field of IT governance. It states that it offers accredited qualifications recognised on a global basis and provides guidelines for organisations that want to offer training courses based on IBITGQ certifications. Check IBITGQ's own site for the current DORA qualification listing.

Is the certification accredited?

IBITGQ states that it has demonstrated compliance with ISO/IEC 17024:2012 and is ISO/IEC 17024:2012 accredited by IAS. It also states that the scope of that accreditation covers its Certified ISO 27001 ISMS Lead Implementer and Certified ISO 27001 ISMS Lead Auditor schemes. The source does not state whether the DORA qualification itself falls within that accredited scope, so confirm this with IBITGQ.

What does the exam cover?

IBITGQ's published material does not set out a public syllabus for this qualification. The DORA subject area itself spans ICT risk management, ICT-related incident reporting, digital operational resilience testing and ICT third-party risk, which is the natural study structure. Always obtain the current official syllabus from IBITGQ or your accredited training provider before booking.

How long is the exam and how many questions are there?

These details are not stated in the source material available here, so no figure should be assumed. Question count, duration, format and pass mark vary between IBITGQ qualifications and can be revised. Ask your accredited training provider or check the IBITGQ exams pages for the current specification before you schedule a sitting.

How should I prepare?

IBITGQ states that it provides guidance on continued professional development to experts and guidelines for organisations offering training based on its certifications. A sensible route is to take a course from an IBITGQ-accredited training provider, then work through the official syllabus domain by domain, building notes on each requirement rather than memorising text. Confirm the current course and exam arrangements with the provider.

Can I retake the exam if I fail?

The retake policy is not stated in the source material, so treat any specific claim you see elsewhere with caution. Retake rules, waiting periods and any additional fees are set by IBITGQ and may differ between qualifications. Ask your training provider or IBITGQ directly before your first attempt so you know your options in advance.

How long is the certification valid?

The validity period is not stated in the source material available here. IBITGQ emphasises continued professional development guidance for certified experts, which suggests ongoing maintenance expectations, but the specific recertification or renewal requirements for this qualification must be confirmed with IBITGQ rather than assumed from other schemes.

What causes candidates to fail?

Without an official syllabus we cannot state exam-specific failure causes. In practice, candidates on governance qualifications lose marks by studying headlines rather than obligations: knowing that DORA addresses incident reporting but not what must be reported, to whom and when. Build precise, requirement-level notes for each domain and test yourself on definitions and sequences, not just concepts.

Where can I find an accredited course?

IBITGQ publishes a Find Training Organisation page and an ATO (Accredited Training Organisation) programme, and its site includes a Find an IBITGQ course facility. Use those official listings to identify a provider rather than relying on third-party directories, and confirm that the specific DORA course you book maps to the current qualification.