PECB DORA Foundation case studies

PECB DORA Foundation · Put your knowledge to work in context.

The PECB DORA Foundation credential is an entry-level certificate for professionals who need a working understanding of the EU Digital Operational Resilience Act (DORA) and its application in the financial services sector. According to PECB, the training course provides a comprehensive introduction to DORA and its core principles, covering ICT risk management, incident reporting, digital operational resilience testing, third-party risk management, and information sharing practices. The PECB DORA Foundation case studies are 5 cases and about 3,237 words.

Proportionality trap: simplified DORA framework for a mid-sized payment institution

Helios Pay is an EU-authorised payment institution with 48 employees, 2.1 million card and account-to-account transactions per month, and no proprietary data centre. Its core ledger runs on two IaaS tenants from different hyperscalers, but both rely on the same identity provider and the same payment switch vendor.

652 words, about 3 min 2

Board approval conflict: risk appetite versus budget cuts and a conflicted ICT risk function

Northbridge Credit Union is a 320-person institution with €4.8 billion in assets. Its board approved a risk appetite statement saying it has 'low tolerance for operational disruption', but in the same meeting cut the ICT budget by 15% and deferred a disaster-recovery site refresh.

651 words, about 3 min 3

Major incident classification and reporting clock after a cloud network outage

Atlas Trading is an EU investment firm with 210,000 retail clients. On Tuesday its online trading platform became unavailable at 09:10 after a cloud provider network misconfiguration.

641 words, about 3 min 4

Concentration risk in a single-cloud insurance stack with an undisclosed fourth party

Rheinland Versicherung is a non-life insurer with 1.1 million policyholders. Its claims platform, policy administration, and customer portal all run on one hyperscaler in a single EU region.

662 words, about 3 min 5

Threat-led penetration testing: internal team, scope, and supervisory expectations

Meridian Bank is a significant credit institution with 4,000 staff and a large digital mortgage and payments franchise. Its ICT testing programme consists of an annual vulnerability scan, an application penetration test by the internal security team, and a tabletop exercise.

631 words, about 3 min