Staying current with the rapidly changing dynamics of governance and risk management isn’t a choice — it’s fundamental to your organization’s success. Becoming your organization’s expert on government policy, risk management, shareholder communications and ongoing education and training isn’t easy. You need help from both industry experts and your peers. That’s why we invite you to join us at 

Wondering if Elevate is for you? Here are ten reasons not to miss it:

We're featuring a lineup of renowned speakers and thought leaders, like Michael Rasmussen, GRC Analyst and Pundit at GRC 20/20 Research, and Cody Scott, Senior Analyst at Forrester, with dozens more to be announced soon. From AI and enterprise risk management to sustainability and nonprofit board experience, 

 covers a range of topics with more than 60 sessions that will make this your most valuable learning experience of the year. Gain valuable insights, explore actionable strategies and discover practical tools from the people shaping the future of GRC and ESG.

2. Invest in yourself with continued learning

You play a vital role in promoting a culture of ongoing learning in your organization, so now it's your turn to sharpen your own skills. Get practical, hands-on training and earn continuing education credits and CLEs for ongoing professional development.

3. Hear expert advice for getting the most from your Diligent software

Whether you're a seasoned user or just getting started, 

 prepares you to extract the full potential of Diligent software. You can ask questions, explore upcoming features and learn about industry-specific best practices — directly from Diligent subject matter and product experts.

Elevate is the year’s singular event where the world’s leading GRC solutions provider shares industry insights, best practices and emerging solutions that you can use to achieve your own GRC goals. Discover how to turn the art of governance into a clear strategic advantage by participating in a wide range of sessions, training workshops, round table discussions and solution demonstrations. Explore topics ranging from AI to ethical compliance to enterprise risk management. If you're looking for practical skills and actionable strategies that enhance everyday organizational practices and drive success, 

5. Build your network and create high-value connections


Networking is essential in the public and nonprofit sectors. Developing relationships with peers you trust is a great way to advance your organization—and your own career. Elevate is the ideal venue to forge these meaningful connections and develop relationships with like-minded professionals who face the same challenges you do. 

 provides an intentional space for connecting with 600+ of your peers. You’ll have multiple opportunities to form new relationships with people who understand the complexities of your sector.

Houston boasts a vibrant culinary scene with a wide range of restaurants and food trucks, offering everything from traditional Texan barbecue to international cuisines. The city is also home to many green spaces, so if you need fresh air, visit one of the city’s many parks and gardens.


7. Problem-solve with peers — and connect in person


Elevate allows you to explore and experiment with new ideas, new software and innovative strategies. So, don’t hold back! We designed Elevate for you to collaborate and problem-solve through workshops, training sessions, and networking opportunities. It's a chance to escape the daily grind, learn from experts and share ideas with peers.


8. Discover practical insights for real-world solutions


Elevate isn’t just about the theoretical. Every session offers actionable takeaways you can use to drive results right away. Bring practical insights, proven strategies and new tools back to your team and find new ways to solve familiar challenges — and create new growth opportunities in the process.

9. Strengthen governance and compliance across your organization

Elevate offers a unique opportunity to explore future innovations planned for the Diligent One Platform. Expand your understanding of how the platform strengthens governance and improves risk management and compliance workflows in your organization. In addition to new and emerging features, you’ll also have multiple opportunities to explore the many integrations we offer that contribute to improved outcomes within your organization or community.

10. Build a solid plan for long-term success

Diligent is investing in the future of GRC and continually introducing new technologies and best practices to help organizations like yours succeed. Elevate is the one event where all of this technology, knowledge and innovation is on display. Attending Elevate and absorbing everything it has to offer will give you the knowledge and tools you need to build the right long-term plan for your organization.

Is it obvious that we want leaders like you to be part of Elevate 2024? We hope so. Join us in Houston this September and get everything you need to make a difference in your organization and in the communities you serve.

Save up to $400 by registering before May 31. 

 to secure your spot (and save!) at Elevate 2024.

10 reasons why you won’t want to miss Elevate 2024

The financial sector is increasingly dependent on technology and tech companies to deliver financial services, which makes financial entities vulnerable to cyber-attacks or incidents. When not managed properly, information and communication technology (ICT) risks can lead to disruptions of financial services offered across borders. This can have an impact on other companies, sectors and even on the rest of the economy, which underlines the importance of the digital operational resilience of the financial sector.

To deal with this, the EU introduced the Digital Operational Resilience Act (DORA). DORA's aim is to strengthen the IT security of financial entities such as banks, insurance companies and investment firms and ICT third party service providers. The 

 on 16 January 2023 and will apply as of 17 January 2025.

What is the Digital Operational Resilience Act (DORA), and what are the Act's requirements?

DORA is a comprehensive regulatory framework proposed by the European Commission. It seeks to establish a harmonized approach to operational resilience across the European Union (EU). By setting clear expectations for operational resilience, DORA aims to protect consumers, maintain financial stability, and ensure the smooth functioning of digital services.

The Act introduces stringent requirements for firms to manage and mitigate risks related to their digital operations. These include ICT risk management, incident reporting, digital operational resilience testing and more.

Below are DORA's specific requirements, organized into several key components:

Firms must establish robust risk management frameworks that align with DORA's requirements and a control function to oversee ICT risk,

DORA introduces the requirement for financial entities to manage ICT third party risk as an integral component of ICT risk within their ICT risk management framework. The management body must regularly review the risks identified in respect to contractual arrangements on the use of ICT services supporting critical or important functions. The regulation will also implement an oversight framework for critical ICT third-party service providers; these will be designated by the European Supervisory Agencies (ESAs). This potentially extends the scope of DORA beyond outsourcing arrangements to encompass a broad range of IT-related services procured by financial services entities.

 Firms are obligated to promptly report any major ICT-related incidents. The ESAs are developing technical standards to specify the criteria for classifying ICT incidents, materiality thresholds for major incidents, and significant cyber threats.

Testing of digital operational resilience: 

DORA mandates regular testing of digital operational resilience. The ESAs are working on technical standards to provide further details on advanced testing of ICT tools, systems, and processes through threat-led penetration testing (TLPT). These standards will also outline the criteria for identifying financial entities required to perform TLPT.

DORA encourages information sharing among financial entities to foster a collaborative approach to managing digital operational risks. Organizations can collectively enhance their resilience and response capabilities by sharing insights and best practices.

These components form the foundation of DORA, ensuring that financial entities prioritize operational resilience and take proactive measures to mitigate ICT risks. However, as with any regulation, it poses several challenges for organizations to overcome to be fully compliant.

In order to navigate the requirements and expectations of DORA effectively, financial entities must approach compliance with a strategic mindset. This entails taking a proactive approach to compliance and fully understanding the regulation and its requirements.

 DORA encompasses a wide range of requirements and expectations, spanning multiple areas such as risk management, third-party risk, incident reporting, testing, information sharing and more. Each of these components requires careful consideration and implementation to ensure compliance. By starting early, financial entities can allocate sufficient time and resources to thoroughly understand the intricacies of DORA and develop a comprehensive compliance strategy.

Adapting governance structures to align with successful operational resilience:

 Adapting governance structures involves reviewing and potentially revising existing policies, procedures, and decision-making frameworks to align with DORA's requirements. This may include establishing clear lines of responsibility and accountability for operational resilience, defining roles and responsibilities, and implementing robust reporting mechanisms to ensure ongoing compliance. It is crucial to integrate DORA compliance into existing governance frameworks, such as risk management and business continuity, to create a holistic approach to operational resilience.

Identifying connections with current and upcoming regulations:

 DORA does not exist in isolation; it intersects with other existing and upcoming regulations (NIS2, GDPR, MiFID II, PSD3, PSR, Digital Services Act, Digital Markets Act), creating a complex regulatory landscape. Understanding these interconnections is essential for ensuring effective compliance and avoiding duplication of efforts.

Promoting information sharing on cyber threats:

 One of the primary challenges in information sharing is striking the right balance between sharing enough information to be useful for others while protecting sensitive data. Financial entities must ensure that any shared information is appropriately anonymized and aggregated to prevent the identification of specific individuals or organizations. This helps protect the privacy and confidentiality of the parties involved.

Reviewing relationships with ICT service providers:

 DORA mandates that financial entities manage risks associated with their ICT service providers. This includes conducting due diligence, updating contractual agreements, and establishing ongoing monitoring mechanisms, which — when done manually — can take significant resources to conduct properly.

Regularly testing resilience capabilities: 

Ongoing compliance with DORA necessitates regular testing to ensure the maintenance of resilience capabilities.

Developing a culture of operational resilience: 

Developing a culture of operational resilience isn't easy, but it's crucial to ensure that resilience becomes ingrained in the organization's values, mindset and day-to-day operations.

Complying with DORA takes a proactive approach, technology can help

DORA represents a significant regulatory change that businesses must navigate to thrive in the digital age. By proactively adapting to DORA's requirements, organizations can foster transparency, sustainability, and responsible innovation. Compliance with DORA not only mitigates risks but also presents opportunities for growth and competitive advantage.

The right technology can help you streamline processes to get a head start on your DORA compliance initiatives.

Discover more about how Diligent can help your organization comply with DORA and other connected regulations by 

Diligent

Blog

10 reasons why you won’t want to miss Elevate 2024

Promoting secure information sharing and managing ICT risks: Key requirements for DORA compliance

Solutions

Resources

Company

Your Data Matters

Diligent

Blog

10 reasons why you won’t want to miss Elevate 2024

Promoting secure information sharing and managing ICT risks: Key requirements for DORA compliance

SolutionsSolutions

ResourcesResources

CompanyCompany

Your Data Matters

Solutions

Resources

Company