Who this is for
EU financial entities and their critical ICT third-party providers (banks, insurers, fintechs, cloud and SaaS vendors to financials).
What's included
- ICT risk-management framework (Pillar 1)
- Major ICT-related incident classification + reporting procedures (Pillar 2)
- Threat-led penetration testing (TLPT) scoping pack (Pillar 3)
- ICT third-party-risk policy + Critical-ICT-TPP register (Pillar 4)
- Voluntary information-sharing arrangements template (Pillar 5)
- RTS / ITS-aligned mapping spreadsheets
- Board-level resilience reporting templates
- Cyber-recovery playbook with RTO/RPO targets
Deliverable
Full DORA framework in editable Word + Excel, register of critical ICT TPPs, board reporting pack.
Estimated delivery time
7-10 business days · indicative turnaround for SME-tier orders. Enterprise / multi-site engagements scheduled separately.
Frequently asked questions
Who is the listed price for?
The price of $4,500 USD shown above is for SMEs and startups. For larger corporates, enterprise licensing or multi-site programmes, contact us for a tailored quote.
Are the documents editable and brandable?
Yes. Everything is delivered as fully editable Microsoft Word and Excel files you can customise and brand for your organisation.
Do you also offer implementation support?
Yes — pair this toolkit with our retainer services (CISO-aaS, DPO-aaS, Compliance Officer-aaS, Annual Surveillance) for ongoing support.
Is there a money-back guarantee?
Yes — 30 days, no questions asked.