DORA Compliance Advisory Services for Copp Clark

Given that every business case is unique, we first needed to understand Copp Clark’s current security state to shape the right compliance strategy. Therefore, we started with a series of stakeholder interviews to gain insights into the company’s existing processes and developed a tailored roadmap for aligning with DORA.

As a part of it, we performed a gap assessment and benchmarked our findings against DORA requirements for ICT third-party service providers. This helped us validate components for a robust Information Security Management System (ISMS) and prepare the necessary internal documentation, including:

• Risk Management Policy
• Third-party Management Policy
• Business Continuity & Disaster Recovery Plan
• Incident Response Plan

In the scope of the DORA regulatory framework, Digital Operational Resilience Testing (DORT) plays a crucial role. Hence, our next focus was on assessing the Client’s systems’ ability to withstand potential threats by running a penetration test on their environment.

Given that our Client is a service company with a unique operational model involving a distributed infrastructure, we began by defining the right scope for the testing. This helped us avoid unnecessary, resource-intensive assessments and provide Copp Clark with a reasonable assurance that their core systems are secure against breaches. As a part of the testing process, we:

• Conducted an in-depth analysis of the Client’s business process and outlined the areas critical for maintaining operational resiliency
• Performed end-to-end penetration testing on the identified risk areas
• Created a detailed report about identified security weaknesses
• Provided recommendations on the remediation based on market standards and best security practices