DORA Flash
Complete gap analysis in 3-4 weeks: gap mapping, ICT register (Art. 28-30), incident classification (Art. 17-23), supervisor-ready report.
From €14,000
3-4 weeks
Operational — continuous monitoring
Regulatory compliance · EU financial entities
DORA & NIS2 compliance, delivered — not explained
10-day flash audit, ICT third-party register, resilience testing and audit-ready documentation for EU financial entities.
15+ years auditing financial systems
EU Regulation 2022/2554
NIS2 Directive
Results in 10 days
Audit report — DORA—
ICT registerart. 28-30
Incident classificationart. 17-23
Resilience testingTLPT
ICT governancecontracts
SUPERVISOR-READY
2026 — the first full year of DORA enforcement
Sanctions of up to 10% of annual turnover. ACPR/EBA supervision is intensifying — the ICT third-party register (Art. 28-30) and incident classification (Art. 17-23) are the most frequent breaking points in organisations with lean compliance teams.
The firm
The firm in numbers
15 years of expertise serving your compliance.
15+
years of auditing and security for financial systems
100%
Independence — no vendor or integrator partnerships
10d
for a supervisor-ready DORA report
EU
covering France & the European Union
Services
Our 3 packages
Each package is self-contained, with published pricing and documented, supervisor-ready deliverables.
NIS2 Express
Full compliance for critical entities: requirements mapping, ANSSI registration, incident management plan, actionable evidence.
From €25,000
5-8 weeks
DORA 360
Complete audit-ready program: ICT governance, aligned provider contracts, TLPT program, prioritized remediation roadmap.
From €45,000
8-12 weeks
Additional services
Pentest
on quoteafter scoping
ICT register only
from €5,0002 weeks
Training
from €2,500/day1 week
Method
Our method — 4 steps
Sequential, dated, no grey areas.
01
Scoping (48h)
Entity, ICT perimeter, applicable obligations, roadmap.
02
Audit (10d)
Interviews, document review, testing. Risks ranked by supervisory exposure.
03
Deliverables
Report, ICT register, remediation plan. Enforceable before the supervisor.
04
Remediation
Implementation support, interview preparation.
Fees
Transparent pricing
Published prices, no surprises. Firm quote after a free 20-minute scoping call.
| Package | Price | Timeline | Deliverable |
|---|---|---|---|
| DORA Flash | From €14,000 | 3-4 wks | Gap analysis + ICT register + supervisor report |
| NIS2 Express | From €25,000 | 5-8 wks | Compliance file + ANSSI + incident plan |
| DORA 360 | From €45,000 | 8-12 wks | Full audit-ready + TLPT + remediation |
| Regulatory Web Audit | from €2,500 | 5 d | Security + GDPR + performance report |
| Pentest | on quote | after scoping | CVSS report |
| ICT register only | from €5,000 | 2 wks | Register Art. 28-30 |
| Training | from €2,500/day | 1 wk | Sessions + materials |
FAQ
Frequently asked questions
Does DORA apply to my organisation?
DORA applies to financial entities (banks, insurers, CASPs, fintechs) operating in the EU. The initial scoping is free.
What are the risks of non-compliance?
Administrative sanctions, injunctions, and for large entities fines of up to 1% of average daily worldwide turnover. Supervision is intensifying in 2026.
What is the ICT register?
The critical ICT third-party provider register (Art. 28-30): cloud, hosting, payments. Each entity must maintain it and provide it on request.
How long does an audit take?
10 business days between scoping and delivery for the flash audit.
Are you independent?
Yes: no vendor or integrator partnerships. Our recommendations serve no product.
Contact
Let's talk about your compliance
Free scoping within 48h. Firm quote within 24h after scoping.