By document type
| Category | Files |
|---|---|
| Manuals | 44 |
| Policies | 1 |
| Procedures & SOPs | 7 |
| Plans & Programmes | 28 |
| Forms & Records | 51 |
| Checklists & Audit Tools | 24 |
| Registers, Logs & Matrices | 27 |
| Training & Awareness | 93 |
| Guides & Work Instructions | 14 |
| Tools & Workbooks | 3 |
| Other Documents | 51 |
Key documents
| Reference | Document | Format |
|---|---|---|
| AGS-DORA-POL-0201 | DORA Training and Awareness Policy | Word |
| AGS-DORA-MAN-0801 | Master Trainer Manual | Word |
| AGS-DORA-PPT-0502 | Employee Awareness Deck Part 1 — Why It Matters and Common Threats | PowerPoint |
| AGS-DORA-PPT-0302 | Management Body Executive Deck — DORA ICT Risk Governance and Digital Operational Resilience | PowerPoint |
| AGS-DORA-ASM-1203 | General Employee Post-Test | Word |
| AGS-DORA-ASM-1216 | Question Bank | Excel |
- Need the complete document list? Request it — same day
- Want to check the quality first? Preview free samples
Overview
DORA places ICT risk duties on the management body and on the people who run ICT, incident, continuity and third-party processes. This package gives a financial entity the materials to plan, deliver, record, assess and improve that training under Regulation (EU) 2022/2554, which applies from January 2025.
Each statement carries a source label that separates DORA legal requirements, technical standards, supervisory guidance and recommended practice. Content draws on Commission Delegated Regulations (EU) 2024/1774 and (EU) 2024/1772 and the adopted technical standards on incident reporting, third-party policy, TLPT and subcontracting. National options stay marked for your own verification. ISO/IEC 27001:2022 is referenced for optional alignment only. AGS is independent and is not affiliated with the European Commission or any competent authority. Regulations are referenced by citation. Standards are referenced by number and title only, and no standard text is included.
What this course covers
- Training governance: a policy, procedure, annual and specialist plans, and matrices linking DORA articles to roles, modules, assessments and evidence.
- Management body course: an executive deck, trainer guide, workbook and knowledge checks on Article 5 duties, ICT risk, incidents and testing.
- Key personnel course: decks, a trainer guide, handbook and practical exercise book.
- Employees and specialists: an employee awareness course, kits for roles such as ICT administrators, incident response, procurement and internal audit, and new-starter and refresher material.
- Awareness campaign: microlearning scripts and a twelve-month campaign with editable posters, emails, newsletter articles and toolbox talks.
- Assessment and records: a question bank, tabletop exercises, training registers, effectiveness tools and a certificate of completion template. The certificate records training given by your organisation and is not an accredited qualification.
- Worked examples for a fictional EU credit institution.
Who it's for
Financial entities within the scope of DORA Article 2, and the group entities and ICT intra-group service providers around them. It is used by DORA programme leads, compliance and risk teams, HR learning and development, trainers and company secretaries.
It pairs with the DORA ICT Third-Party Risk & Digital Operational Resilience Management System, which covers the DORA framework itself. Organisations under NIS 2 rather than DORA should see the NIS 2 Management Body & Cybersecurity Awareness Training Package.
Everything you get
Every toolkit gives you a full set of working documents for your standard, ready to edit and use.
Native Microsoft files. Add your logo and adapt every document to how you work.
Your full toolkit arrives as a ZIP the moment payment clears.
One purchase covers everyone in your organisation. No per-seat fees.
Built by people who run real audits, so the content matches what assessors check.
One payment, perpetual licence for your organisation. No subscriptions, no renewals.
Full refund if your files are faulty, incomplete or not as described and we can't put it right
Frequently asked questions
What exactly do I receive?
A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.
Are the documents really editable?
Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.
Does this certify my organisation?
No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.
How is it delivered?
Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.
Do I get updates?
Yes. If we revise this toolkit, you're entitled to the updated version at no extra cost — just contact us with your order details.
What is your refund policy?
These are digital products, so once a toolkit has been downloaded we cannot take it back. If you have not downloaded yet, contact us and we will cancel the order and refund you in full. We also refund in full if the files are damaged, incomplete, or not what the product page described.
Cannot find your standard?
Tell us which scheme you work to. We will point you to the right toolkit.




