Banking, ~3,800 employees

DORA readiness and certification at an Irish retail bank

Full Article 13 Section 6 readiness across the workforce, with risk-segment certification for treasury and payments operations.

The customer is an Irish retail bank, in-scope for DORA from the 2025 regulatory date. Their internal compliance function had assessed the awareness-related DORA obligations as substantial and had identified the existing awareness setup (a legacy platform with limited reporting maturity) as insufficient for inspection-readiness.

The platform implementation prioritised three outcomes: workforce-wide coverage of the DORA Article 13 awareness expectations, risk-segment certification for treasury and payments operations (where the BEC-fraud threat profile is materially elevated), and continuous-evidence reporting aligned to the home-state supervisor's expected inspection cadence.

Implementation took ten weeks including identity-provider integration and works-council consultation. The bank's first internal audit against DORA Article 13 expectations completed three months post-go-live with no material findings.

Six months later, the home-state supervisor opened a thematic inspection covering DORA readiness across in-scope Irish entities. The bank's submission included the GetCheckmark continuous-evidence pack; the supervisor's feedback specifically cited the documentation completeness as exceeding the peer-group standard.

Outcome

First internal DORA audit passed with no findings; supervisor inspection submission cited as above peer-group standard.