Achieving DORA compliance with the ISF SOGP

Since 17th January 2025, organisations operating in financial services in the EU need to demonstrate compliance to the Digital Operational Resilience Act (DORA), and we will explain how to be best prepared and how to demonstrate compliance.

In this session, we will explore how the ISF Standard of Good Practice for Information Security (SOGP), related tools and resources can support organisations with their compliance journey.

Join ISF experts Benoit Heynderickx and Martin Tully as they guide you through:

• A comprehensive approach to building a policy framework centred on governance and resilience
• A case study demonstrating how the ISF can support you in successfully implementing DORA compliance.

Speaker bios:

Benoit Heynderickx is a Principal Analyst at the ISF and project lead for the ISF Standard of Good Practice for Information Security. With a wealth of information security know-how, he is also regularly involved in specialised topics such as supply chain, cloud security and quantitative risk analysis. Passionate about information security and risk management, Benoit has a deep and practical experience implementing large scale information security and risk programmes such as ISMS, GDPR Compliance, and third-party risk assurance programmes. Benoit holds security certifications from ISACA and the CSA, as well as an MSc in Information Security and Risk from City, University of London. Benoit is also a Full Member of the Chartered Institute of Information Security.

Martin Tully is a Consultant at the ISF with over twenty years of experience, and has previously been employed at two of the ‘Big Four’ professional services firms. Martin has worked across most industry sectors in the development of the best practice guidance (including the ISF Standard of Good Practice for Information Security) and risk analysis methodologies, such as IRAM2. Martin is also accomplished at: leading the implementation of an ISMS; delivering a number of information risk assessments; reviewing information security policies; assessing security requirements across the supply chain; and updating a complete framework of supporting standards. Prior to the ISF, Martin’s roles have included delivering operational risk reporting, running research projects and benchmarking information security investments for major clients.