Browse categories
Explore
Fiverr Pro
English
$
USD
Looks Like This Service Is On Hold
Our agency will deliver dora compliance assessment for eu financial services
Pakistan
English
22 orders completed
CREST accredited security testing for high trust organisations
RedSecLabs is a UK CREST accredited, Swift, PCI QSA accredited cybersecurity firm delivering penetration testing, PCI DSS, SOC 2, ISO 27001 readiness, incident response and security advisory services....
Vetted by Fiverr Pro
REDSECLABS was selected by the Fiverr Pro team for their expertise.
Vetted for
Cybersecurity
About this Gig
RedSecLabs delivers Digital Operational Resilience Act (DORA) compliance assessments for EU regulated financial entities and their critical ICT third-party providers. DORA has been enforceable since 17 January 2025 and is under active supervisory scrutiny across EU member states.
SERVICES
- Gap assessment against DORA and the published RTS / ITS
- ICT risk management framework design (Articles 616)
- Incident classification and reporting workflow (Articles 1723)
- Digital operational resilience testing programme (Articles 2427)
- Threat Led Penetration Testing (TLPT) where applicable
- ICT third-party risk management (Articles 2844)
- Critical ICT third-party assessment
- Register of Information preparation and submission support
COMMON USE CASES
- Banks, payment institutions and e-money institutions
- Investment firms, asset managers, insurers and reinsurers
- Crypto-asset service providers
- Trading venues and central securities depositories
- Critical ICT third-party providers serving EU financial services
If your firm or your ICT supply chain is in DORA scope, start with the discovery package before your next supervisory review.
Clients We’ve worked with
Bykea
Mobile App Development
Provided cyber security consulting for Bykea to strengthen their overall security posture. Developed a Cyber Security Framework specifically for developers, integrated DevSecOps practices, and significantly improved their Vulnerability Disclosure.
Feb 2023
Portfolio
FAQ
Does DORA apply to my firm?
DORA applies to defined categories of EU financial entity and their critical ICT third-party providers. The discovery call confirms applicability and scope.
We are a UK firm with EU clients, does DORA apply?
If you provide ICT services to EU regulated entities, DORA may apply directly or via the third-party route. We confirm in scoping.
What is TLPT and do we need it?
Threat Led Penetration Testing is required for certain in-scope entities under DORA, aligned to the TIBER-EU framework. Whether your firm is in scope is determined by the competent authority.
Can you support the Register of Information submission?
Yes. Template population, contract review and submission support are included in Standard and Premium.
How does DORA interact with NIS2?
DORA acts as lex specialis for financial entities, overriding NIS2 in areas of overlap. We map both where group scope is mixed.
Can you correspond with our competent authority?
We support correspondence preparation in Premium. Direct authority relationships remain with the regulated entity.
