New regulation
Training everyone on a new regulation
Start from a ready-made course or your own policy, train everyone in scope before the deadline, and keep a record per person.
The situation
DORA has applied to your firm since January 2025. It requires ICT security awareness and digital operational resilience training as a compulsory part of staff training, for all employees and senior management. The compliance team has read the regulation. The other 600 people haven't, and the next supervisory review will ask what training they received.
How it works in Ervy
01
Start from the library or your policy
Use the ready-made DORA course, or upload your internal policy and procedures.
02
Adjust it to your firm
Edit any lesson so it matches your systems, teams and procedures.
03
Send it to everyone in scope
Via Microsoft Teams or email, by department if the training differs.
04
Keep the record
Completion per person, ready when the supervisor asks.
Documents you'd upload
ICT risk management framework
ICT incident reporting procedure
Third-party ICT risk policy
Business continuity plan
Internal regulation summary
Regulator guidance notes
What the lessons look like
The result
Everyone trained before the deadline, not after it
A record per person for the supervisor
When guidance changes, update the course and re-send it
Related
Related solution
Compliance
Scheduled compliance lessons with every completion logged.
Related use case
Preparing staff training for an ISO audit
The same approach for your management system policies.
See what Ervy builds from your documents
Upload one document and get a full course in under 10 minutes.
