DORA Employee Readiness

DORA Employee Readiness Course is practical training aimed at employees, focused on their daily role in digital operational resilience. The purpose is not to teach the regulation in legal detail, but to translate DORA into behaviours, awareness, reporting, escalation and initial response.

Upcoming dates

Confirmed dates.
Synchronous, live training. Interaction with the trainer and the group.

3 June 2026 morning
Live Online • next edition
3 June 2026 afternoon
Live Online • base price
Duration: 2h
Language: available in Portuguese or English
Training: culture, behaviours and reporting
Exam: 15 min
ESSENTIAL LEVEL — structured awareness and core behaviours.

Why this course exists

To translate DORA into practical guidance for those who use systems, process information and participate in the organisation’s operational continuity.

Digital operational resilience does not depend only on policies, tools and technical teams. It also depends on the daily behaviour of people, the ability to recognise risk signals and discipline in reporting and initial response.

This course exists to translate DORA into practical guidance for those who use systems, process information, depend on digital services and participate in the organisation’s operational continuity.

What this course enables you to do

Understand

Understand, in simple terms, what DORA is and why it matters to the organisation and to daily work.

Recognise

Recognise the role of each employee in reducing risk and supporting operational readiness.

Report

Know how to report, who to escalate to and what information to communicate when facing an anomaly, failure or incident.

Act

Act appropriately in the first moments of disruption, avoiding errors that may worsen the impact.

Frameworks, regulation and topics addressed throughout the course

DORA in practical language
Digital operational resilience
Employee role
Reporting and escalation culture
Good practices in the use of systems and access rights
Phishing and unexpected requests
Incidents, failures and anomalies
Initial response
Continuity in disruption situations
Evidence preservation
Internal procedures
Regulatory onboarding

Value for the organisation

  • Strengthens the culture of awareness, reporting and individual responsibility.
  • Reduces avoidable errors and inadequate responses in initial phases.
  • Improves alignment between operational behaviour and resilience requirements.
  • Provides evidence of awareness and training for internal and external purposes.

Introduction

The DORA Employee Readiness course is practical training aimed at employees, focused on their daily role in digital operational resilience.

The purpose is not to teach the regulation in legal detail, but to translate DORA into behaviours, awareness, reporting, escalation and initial response.

The training may be delivered as self-paced e-learning, synchronous Live Online or classroom training for dedicated groups, including final assessment and a Behaviour® Certificate of Completion, as evidence of preparation and awareness in the context of digital operational resilience.

This Training Plan and all associated documents are protected by Copyright and registered as a literary work with IGAC.

General Objectives

At the end of this course, participants will be able to:

  • Understand the concept of digital operational resilience.
  • Identify correct behaviours in the use of systems, access rights and information.
  • Recognise signs of an incident or relevant anomaly.
  • Report correctly and act appropriately in the first moments.
  • Contribute to continuity, initial containment and operational discipline.

Target Audience

  • Employees in general
  • Users of critical systems
  • Operations
  • Back office
  • Administrative teams
  • Customer support
  • Business functions with intensive use of platforms and data
  • New employees in the context of regulatory onboarding

Prerequisites

There are no mandatory formal prerequisites. The course was designed to be accessible to participants without a specialised technical profile, favouring clear language, practical applicability and a behavioural focus. It is suitable for cross-functional awareness programmes, periodic capacity-building and the reinforcement of security culture in teams and organisations.

However, other specific requirements may apply, where relevant, depending on the quotation or proposal presented. Please consult the applicable proposal.

Programme

1. What DORA is and why it matters in daily work
  • Digital operational resilience in simple language
  • Why ICT failures may generate operational, reputational and service impact
  • The employee’s role in protecting the organisation
2. Each person’s role in digital operational resilience
  • Individual responsibility
  • Operational discipline
  • Importance of timely reporting
  • Awareness, readiness and cooperation
3. Good practices in the use of systems, access rights and information
  • Credentials, authentication and access rights
  • Secure use of equipment and digital channels
  • Care with attachments, links and unexpected requests
  • Safe conduct in remote work and mobility
4. How to recognise incidents, anomalies and risk signals
  • Examples of unavailability, error, fraud, phishing or anomalous behaviour
  • Difference between a common failure and a situation requiring escalation
  • Importance of recording and rapid communication
5. Reporting, escalation and initial response
  • How to report correctly
  • What information to communicate
  • What to do in the first minutes
  • What not to do
  • Evidence preservation and following internal procedures
6. Continuity and behaviour during disruption
  • What changes when a service or system fails
  • Alternative procedures and minimum continuity
  • Coordination with internal instructions
  • Learning after an incident

Exam(s) and Certification

Exam “Certified DORA Employee Readiness”

The exam covers the following competence domains:

  • Domain 1: DORA fundamentals and digital operational resilience in daily work
  • Domain 2: Individual role, operational discipline and responsibility in the DORA context
  • Domain 3: Good practices in the use of systems, access rights and information
  • Domain 4: Recognition of incidents, anomalies and risk signals
  • Domain 5: Reporting, escalation, initial response and behaviour during disruption

 

Language(s): Portuguese and English.
Duration: 15 minutes.
Format: Multiple choice.
Pass mark: ≥ 60%.
Results: Pass or Fail.
Issuing entity: Behaviour (legal entity), through its certification service Behaviour Certification Services.
Retake: 1 free retake within a maximum period of 2 months after the result of the initial exam.

Certification process

After successfully completing the exam and accepting or signing the applicable agreement and Code of Ethics, the candidate achieves the credential Certified DORA Employee Readiness, issued by Behaviour (legal entity), through its certification service Behaviour Certification Services.

A Behaviour® professional certification, as a proprietary certification scheme, with international market recognition. The scheme is designed and operated based on good practices for personal certification, principles of impartiality and exam quality, and applicable international references.

A Certificate and a Digital Certification Badge will be issued to participants who successfully complete the certification exam and satisfy all applicable certification requirements.

Certification programmes are valid only for individuals, not companies, and the award and maintenance of certification depend on the exam result and compliance with the applicable agreement and Code of Ethics.

If the professional does not comply with the agreement or the Code of Ethics, the certification is not granted or is revoked.

Other Information

General Information
  • Training available in Portuguese or English.
  • Online training materials available in Portuguese or English, with online access, in accordance with the awarded conditions.
  • Behaviour digital Training Attendance Certificate with 2 CPD/CPE credits.
  • Online Certification Exam, in Portuguese or English. The exam may be taken up to 2 months from the course start date.
  • If the candidate does not pass the exam, they are entitled to one free retake within a maximum period of 2 months from the release date of the initial exam result.
  • Behaviour digital Certification Diploma and Digital Certification Badge after passing the exam and completing the application process.
Trainer(s)

The trainers are professionals with experience in governance, risk, compliance, cybersecurity, operational resilience and digital regulation, able to translate DORA into practical behaviours, reporting and initial response in the daily context of teams.

Benefits

View benefits
  • Strengthens the culture of awareness, reporting and individual responsibility.
  • Helps reduce avoidable errors and inadequate responses in the first moments of an incident or disruption.
  • Improves alignment between operational behaviour and resilience requirements.
  • Creates evidence of awareness and preparation for internal and external purposes.
  • Contributes to regulatory onboarding and periodic reinforcement of safe practices.

Logistics

Useful information
  • Live Online morning edition: 09:30–11:30 (Lisbon time), with short breaks where applicable
  • Classroom afternoon edition: 14:30–16:30 (Lisbon time), with short breaks where applicable
  • 2 hours of synchronous training, morning or afternoon.
  • Requirements: computer with stable internet, updated browser, PDF reader and audio/video
Hotels in Lisbon

Find out where you can stay in Lisbon, near Behaviour, for classroom training.

Frequently Asked Questions

Objective answers to additional questions about the framework and usefulness of the course.

Is this course suitable for onboarding new employees?

Yes. It is a particularly suitable option for regulatory onboarding, because it helps new employees understand their role in the safe use of systems, reporting and initial response when facing anomalies or incidents.

Can it be used as periodic refresher training for teams already trained?

Yes. The course may be used as a periodic reinforcement of operational culture, especially when there are process changes, new tools, increased remote work or the need to consolidate practices after incidents.

Is it relevant for non-technical functions or roles without formal cybersecurity responsibilities?

Yes. Digital operational resilience also depends on the daily behaviour of those who use systems, process information, interact with customers or follow internal procedures, even when they do not perform technical roles.

Can it be adapted by function or organisational area?

Yes. In a dedicated format, the course can be adjusted with examples, microcontent or messages closer to operations, back office, customer support, administrative teams or other relevant areas.

Does this course replace more structured training on the DORA regulation?

No. Employee Readiness is a practical and behavioural awareness pathway. When the need is to understand the regulation in greater depth and structure, the most appropriate path becomes DORA Foundation.

For general questions about registration, delivery modes, exams, certification and recertification, please consult the BEHAVIOUR® FAQs.

Registration

Complete the form to express interest or request your registration for the preferred edition. Check the upcoming dates.

Contact name
=

Request more information

If you would like help to frame the course within your professional or organisational context, contact us and we will indicate the most suitable path.

Request Information

Companies: request a proposal

For employee groups, onboarding, awareness campaigns or periodic reinforcement of operational culture, we provide volume conditions and a proposal tailored to the organisation.

Request Proposal

This course may be attended by individual professionals. It may also be integrated into internal awareness, cross-functional capacity-building and readiness initiatives in the DORA context.