DORA – The New EU Regulation on Digital Operational Resilience

Introduction & Programme

With the Digital Operational Resilience Act (DORA), the European Union has established a harmonised regulatory framework aimed at strengthening the digital resilience of financial institutions – including insurance undertakings – against ICT disruptions, cyberattacks, and other technology-related risks. The regulation has been directly applicable since January 2025.

In the course of implementing DORA, insurance undertakings have been confronted with a wide range of new organisational and technical requirements. Key questions include:

• How should digital risks be systematically identified, assessed, and managed within the ICT risk management framework?
• What implications does DORA have for existing governance structures and internal control systems within the undertaking?
• What requirements apply to the reporting of major ICT-related incidents to supervisory authorities, the systematic execution of digital operational resilience testing, and the management and oversight of ICT third-party service providers?
  

In addition to outlining the regulatory basis, the session will particularly address the interaction between DORA and existing supervisory frameworks like Solvency II.

Preliminary Programme
Friday, 12 June 2026
09:30-09:45 DORA – A brief introduction
09:45-10:45 ICT risk management
10:45-11:15 Reporting of major ICT-related incidents
11:15-11:45 Break
11:45-12:00 Digital operational resilience testing
12:00-12:45 Managing of ICT third-party service providers
12:45-13:00 Conclusion and Initial Supervisory and Audit Experiences

All the above times are given in CEST (Central European Summer Time).

Learning Objectives & Approach

The two-hour web session provides participants with a structured overview of the key elements of the DORA Regulation. It explains the regulatory objectives pursued by the European Union, systematically presents the core regulatory requirements, and discusses typical implementation challenges faced by insurance undertakings in practice. The session will also provide insights into initial experiences in Germany with DORA-related audits conducted by BaFin and external auditors.

Participants

The web session may be of interest to professionals who would like to learn more about this important regulatory requirement, which significantly affects the (IT-) governance framework of insurance undertakings. Prior knowledge of DORA requirements is not necessary; however, familiarity with general governance requirements under Solvency II may be beneficial.

Technical Requirements
Please check with your IT department if your firewall and computer settings support web session participation (the programme Zoom will be used for this online training). Please also make sure to join the web session with a stable internet connection.

Lecturers

Dr Bernd Fröhler
Bernd has more than 20 years of experience in business consulting and in various top management positions in the life insurance industry. Most recently, he was CEO of an international life insurance company focusing on the unit-linked business and prior to that Executive Director for EY with a focus on top management consulting and the implementation of complex regulatory issues. In the meantime, he works as an independent advisor. Besides his work as a lecturer, he supports insurance undertakings mainly in project management and regulatory issues like IDD / POG, DORA, ESG and Solvency II.

Language & CPD Credits

The language of the web session will be English.

Fees & Registration Details

Early Bird Registration Fee (until 1 May 2026):

• For private customers in the EU: €240.00 + VAT of the billing country (example Germany: €285.60 incl. 19% VAT)
• For private customers outside the EU: €285.60 (incl. 19% VAT)
• For businesses within the EU (excl. Germany, with valid VAT ID): €240.00 (net, reverse charge applies)
• For businesses in Germany: €285.60 (incl. 19% VAT)

Regular Registration Fee (from 2 May 2026):

• For private customers in the EU: €315.00 + VAT of the billing country (example Germany: €374.85 incl. 19% VAT)
• For private customers outside the EU: €374.85 (incl. 19% VAT)
• For businesses within the EU (excl. Germany, with valid VAT ID): €315.00 (net, reverse charge applies)
• For businesses in Germany: €374.85 (incl. 19% VAT)

Important VAT Information:

• For private customers with a billing address in an EU country: VAT will be charged at the applicable rate in the country of the billing address. The final amount, including VAT, will be calculated upon invoicing.
• For customers with a non-EU (third country) billing address: Only a non-company billing address is accepted for VAT compliance reasons. 19% VAT applies to all non-EU private customers.
• For businesses within the EU (excluding Germany), Iceland, Liechtenstein, Norway, Switzerland, and the UK with a valid VAT ID: The reverse charge mechanism applies (net price; VAT will not be charged). Please ensure your valid VAT ID is entered correctly during registration.
• For all customers with a billing address in Germany: 19% VAT applies.

Please submit your registration using our online form below. Closer to the event, you will receive further login details to join the web session.

Your registration is binding. Cancellation is only possible up to 2 weeks before the first day of the event. If you cancel later, the full participation fee is due. You may appoint someone to take your place but must notify us in advance. EAA has the right to cancel the event if the minimum number of participants is not reached.

We will send you an invoice via email. Please allow a few days for handling. Please always give your invoice number when you effect payment. All bank charges are to be borne by the participant.

Registration is open until two working days before the web session. If registration has already been closed for this web session, please call us or send an email to contact@actuarial-academy.com in order to find out whether a late registration is still possible.