IBITGQ C-DORA case studies

IBITGQ C-DORA · Put your knowledge to work in context.

The IBITGQ Certified DORA (C-DORA) qualification is a personnel certification offered by the International Board for IT Governance Qualifications (IBITGQ), a personnel certification body that certifies individuals in the field of IT governance. IBITGQ states that it is dedicated to the provision of qualifications to experts working in information security, business resilience and IT governance, and that it offers accredited qualifications recognised on a global basis, guidelines for organisations wishing to offer training courses based on IBITGQ certifications, and guidance on continued professional development. The IBITGQ C-DORA case studies are 5 cases and about 3,548 words.

Board request to defer DORA remediation at a life insurer

Northbridge Life is an EU life insurer with 850 staff, 2.1 million policyholders and €9bn in assets. Its core policy administration and claims platform is SaaS from a US provider; 63 ICT arrangements support operations.

736 words, about 4 min 2

Unsupported payment switch and failed restore at a retail bank

Helios Bank is a mid-sized EU retail bank with 2.4 million customers. Its card payment switch runs on Windows Server 2012 R2, which no longer receives vendor security updates.

744 words, about 4 min 3

DDoS with later evidence of unauthorized access

At 02:10 on a Tuesday, a distributed denial-of-service attack disabled the online banking and mobile payment services of an EU bank. Detection occurred at 02:25; the incident team restored login at 05:40, but payment initiation failed until 06:30 and the transaction backlog cleared at 09:00.

702 words, about 4 min 4

Threat-led penetration test with an excluded cloud dependency

Vantage Bank is an EU credit institution with €40bn in assets and critical payment, lending and custody functions. Its competent authority has designated it to perform threat-led penetration testing (TLPT).

699 words, about 3 min 5

Cloud renewal for critical portfolio management at an asset manager

Meridian Asset Management is an EU AIFM with €18bn assets under management. It uses a non-EU SaaS provider for portfolio management, order routing and regulatory reporting.

667 words, about 3 min