Launch phase — we are onboarding our founding clients and experts. Prices are fixed once an expert confirms your scope.
All services
Legal & complianceDeliver
DORA Readiness Gap Assessment
Find the gaps in your ICT risk, incident and third-party management — and plan how to close them.
Obligations depend on your role (for example a regulated firm or an ICT supplier) and your country. Not sure which applies? Start with the EU Rules Applicability Check.
What you receive
- Gap matrix against DORA requirements
- Register of ICT third-party arrangements (template filled)
- Major ICT incident reporting playbook
- Prioritised remediation roadmap
Exactly what's included
Right for you if
- • EU financial entities in scope of DORA, or ICT suppliers asked by such a client to evidence DORA-related controls
- • Your role is confirmed first — obligations differ for financial entities, ICT suppliers and designated critical providers
What we need from you
- • Existing ICT risk, incident and outsourcing policies; list of ICT services and contracts; any client questionnaire
How the result is accepted
- • Gap matrix against the requirements that apply to your role, populated third-party register template, incident playbook and prioritised roadmap
Not included
- • Closing the gaps (offered as follow-up)
- • Certification or regulator submissions
Revisions
- • Up to 2 rounds of revisions on each draft, within 5 working days of delivery.
- • Anything outside this scope is offered as a separate change request for your approval.
Dependencies
- • Timely client inputs — the timeline pauses while we wait for information or access.
- • Up to 1 legal entity and 25 ICT services; larger scopes are quoted separately
Who delivers it
Senior Compliance & Regulatory Expert
Enterprise & Solution Architect
Independent experts, engaged by Cons2Go as subcontractors. You see your expert's profile before you pay. Meet the team →