The AI Risk Management Pro certification with its three working templates, plus the DORA overlap module — for financial entities that have to satisfy Regulation (EU) 2022/2554 and the AI Act at the same time.
Secure payment by Stripe. Delivered by email immediately, one named user.
Financial entities are the one group that has to satisfy both regimes at once, and they are also the group most likely to assume that one has already discharged the other. It has not: DORA governs the resilience of the ICT that delivers your services, the AI Act governs the safety and rights impact of particular AI systems, and a DORA risk register contains no Art. 9 rows at all.
This bundle is the practitioner track plus the analysis that tells you what you can build once.
AI Risk Management Pro certification — eight modules on standing up a programme and producing the artefacts: the mandate and the role determination, inventory and classification, the Art. 9 register, Art. 10 data governance evidence, the Annex IV file, oversight and logging, assurance and conformity readiness, and the post-market cadence. Twenty-five questions drawn from a bank of 105, graded on our server, 70% to pass, retakes included, with a verifiable certificate and an Open Badge.
The three working templates — AI Risk Register pre-mapped to the Annex III categories, Annex IV Technical Documentation File, and the Art. 10 Data Governance Checklist. These are the artefacts the course builds, not illustrations of them.
DORA + AI Act Overlap module — ten pages on where the two regimes converge, what each still demands separately, a ten-case classification matrix for the AI that financial entities actually run, a single vendor contract schedule serving both, the three incident clocks side by side, and a 90-day sequence.
Art. 27 catches banks and insurers specifically. The fundamental rights impact assessment reads as a public-sector duty, and most financial entities scope themselves out of it. Art. 27(1) extends it to credit institutions for Annex III point 5(b) creditworthiness systems and to insurance undertakings for point 5(c) life and health risk-assessment and pricing. It has no DORA analogue, so nothing you already run covers it.
Fraud detection is carved out of point 5(b), and HR screening needs no notified body. Those two determinations move budgets in opposite directions, and both are routinely got wrong — the first because Annex III is pattern-matched before its exclusions are read, the second because Art. 43(2) routes Annex III points 2 to 8 through internal control under Annex VI.
Delivery is immediate: the templates and the module arrive by email, and the examination opens to the address you buy with.
Is your organisation subject to both the AI Act and DORA? The two regulations intersect on the operational resilience of financial AI systems. Our sister site regulation-dora.eu covers DORA in depth — including what the AI Act adds on top of an existing DORA programme.
The AI Act for financial institutions ↗ Explore regulation-dora.eu ↗The AI Risk Management Pro certification — eight modules and the 25-question examination with its verifiable certificate — plus the three working XLSX templates the track is built around (AI Risk Register mapped to Annex III, Annex IV Technical Documentation File, Art. 10 Data Governance Checklist), plus the DORA + AI Act Overlap module as a 9-page PDF. Bought separately — the certification at EUR 299, which already carries the three templates, and the Overlap module at EUR 99 — the parts list at EUR 398.
Compliance, risk and ICT functions in credit institutions, insurance undertakings, investment firms and payment institutions — entities that have been under DORA since January 2025 and now have to build an AI Act programme without duplicating what they already run.
No. If DORA does not apply to you, buy the AI Risk Management Pro certification on its own: the overlap module is the only part of this bundle that is specific to financial entities, and everything else is identical.
No, and we will not claim it does. The examination and the certificate are on the AI Act. The DORA module is an analysis document, not an examined syllabus — it exists so that a DORA-regulated entity can tell which of its existing controls already serve the AI Act and which do not.
No, and none exists for individuals. In the AI Act, conformity assessment and notified bodies apply to AI systems rather than to people (Art. 3(20)-(22), Art. 48). This is a private certificate with a public id anyone can verify, issued by Regulation AI, and we say so on the certificate itself.