Who we help

• Cyprus Investment Firms (CIFs)

• Crypto-Asset Service Providers (CASPs)

• AIFMs & UCITS Managers

• Crowdfunding Platforms

• Trading Venues & Depositories

• ICT Third- Party Providers

Our DORA Compliance Framework

1 GAP Assessment

Identify ICT risk and resilience gaps versus DORA obligations.

2 Entity Classification & Scoping

Define your regulatory obligations under DORA based on your entity’s profile and critical functions.

7 Continuous Advisory

Get ongoing support, training and updates as regulations evolve.

3 Framework design

Build a tailored ICT Risk Management Framework that meets the five DORA pillars.

4 Policy & Controls Implementation

Draft and implement governance policies, controls, and reporting mechanisms.

5 Resilience Testing

Coordinate or support scenario-based testing, including threat-led penetration exercises.

6 Regulatory Submissions

Prepare and submit mandatory deliverables to CySEC and other competent authorities.

What Makes Us Different

Cross-sector experience across fintech, asset management, and ICT

Combined expertise in regulatory policy, cybersecurity and risk

Focused, high-touch support - not cookie-cutter templates

Cyprus - based, EU - aligned, and CySEC aware

Get in touch

For DORA compliance enquiries