Digital Operational Resilience & ICT Third-Party Risk
Regulators stopped asking whether you can prevent every incident and started asking what happens when you can’t — resilience is the ability to take the hit and keep serving.
Format
Classroom · Virtual
Upcoming sessions
Pick a session to applyADMISSIONS OPENThe programme
Europe’s DORA regime has set the template — ICT risk management, resilience testing, incident classification and reporting, and a controlled register of every critical third party — and supervisors across the Gulf, Africa and Asia are issuing parallel rules. This programme builds the working system behind the acronyms: mapping critical business services and setting impact tolerances; the ICT risk framework that connects technology risk to board appetite; scenario-based resilience testing that proves tolerances rather than asserting them; incident response with the classification and reporting clocks regulators now run; and the third-party dimension — concentration risk, exit plans, contract clauses and the register — where most institutions are most exposed. Read as a design specification for any supervised institution, wherever its regulator sits on the adoption curve.
What you will do
Who attends
Operational-resilience, business-continuity and ICT risk teams; CISOs and technology leaders; outsourcing and vendor managers; compliance and internal audit; executives and board members of banks, insurers and market infrastructures.
Programme agenda
Built for the decisions no textbook prepares you for
I.The resilience frame
- From continuity to resilience: what changed in the supervisory ask
- Critical business services and impact tolerances that mean something
- The ICT risk framework and board accountability
II.Proving it
- Scenario-based testing: severe-but-plausible, run honestly
- Incident classification, reporting clocks and the communication drill
- Lessons-learned loops that actually change the estate
III.The third-party exposure
- The register: every critical ICT provider, mapped and owned
- Concentration risk, cloud dependency and exit plans that could run
- Contract clauses, audit rights and the supervisory dialogue
Frequently asked
Who should attend the operational resilience programme?
It serves operational-resilience, business-continuity and ICT risk teams, CISOs and technology leaders, outsourcing and vendor managers, compliance and internal audit, and the executives and board members of banks, insurers and market infrastructures who answer for resilience to their supervisor.
Do we need to be subject to DORA for the course to apply?
No. DORA has set the template, but supervisors across the Gulf, Africa and Asia are issuing parallel rules, and the programme is read as a design specification for any supervised institution, wherever its regulator sits on the adoption curve. It is professional training on building the resilience system, not legal advice on a specific regime.
Can BIZENIUS deliver this in-house and in French?
Yes. The programme runs in English and French, and an in-house edition can be tailored to your critical services, third-party register and supervisory context. Sessions run on a rolling calendar with dates confirmed on request; fees and quotations are provided on enquiry.
Share this programme
Know the right person for this seat?Nominate a colleague →
In their words
Knowledge transfer, emphasised throughout
“We worked with BIZENIUS for our Fresh Graduates Programme — they are simply amazing. Knowledge transfer and practical learning were emphasised throughout.”
Kuwait Investment Authority
From the Mandate Record
Mandate № 04 · Africa
Capital frameworks built to run the bank, not to satisfy a filing
Most frameworks are written to satisfy the regulator. We build the kind that run the bank.
Open the dossier →
The Capability Arc™
Fix it · Advisory
Advisory & Consultancy
A senior bench across risk, treasury and regulation.
Learning is one point on the Capability Arc. Many institutions pair this programme with the advisory engagement — and automate what the framework demands.
Teams from these institutions train with BIZENIUS
Related programmes
Digital & Retail Banking Business Continuity Strategy Masterclass
Business continuity for digital and retail banking — plans that survive significant business disruptions and channel strategies built for customers who moved online.
View programmeThird-Party & Supply Chain Cyber Risk
Your security is now other people’s security — vendor assessment that predicts, contracts with teeth, concentration risk seen honestly and the response plan for a supplier’s breach.
View programmeCyber Incident Response: From Detection to Recovery
The breach handled as an operation — detection and triage, containment decisions under pressure, forensics that preserve evidence, communication and the recovery that closes the door.
View programmeRisk & Compliance
Take the brochure with you.
One request — the full agenda, the faculty and the next cohort dates, sent personally by the admissions team.