When you need to present DORA evidence
Have you received a supervisory request or are you preparing for an internal review? We help organise the available information, identify gaps and define next actions. Applicable requirements and scope are confirmed for your organisation.
What you may already have
Policies, a supplier inventory, contracts, a register of information, previous findings.
What you receive
The agreed review, an organised record of available evidence and gaps, priorities and a management presentation.
Base scope
The base scope covers one legal entity, one regulation — DORA, up to 100 employees, review of up to 15 contracts and 25 existing policies, a Register of Information covering up to 20 ICT arrangements and one supervisory authority. Larger or different scopes are quoted individually.
Budget and timing
DORA assessment from €7 900, typically 3–6 weeks with the required input. Where both assessment and implementation are commissioned, the combined starting budget is €17 800, with implementation scoped separately.
Published starting prices apply to the base scope described. The final price is agreed in writing before work begins.
Our experience includes security leadership in regulated financial organisations and hands-on implementation of technical safeguards. People →
See the regulatory-evidence example → · DORA →
Common questions
- Do we need a prior assessment?
- You do not need an existing assessment to commission this Sprint — it includes the agreed assessment. If you already have a suitable assessment and need implementation, we first review whether it is sufficient for the intended scope.
- Is implementation included?
- No — implementation is a separate engagement from €9 900; the combined starting budget is €17 800.
- What if documents are missing?
- We document the gaps and necessary next actions. Management assigns owners and agrees a plan, taking applicable requirements and deadlines into account.