​​​Number of players: L version: 1-10, XL version: 1-20.  

They must use their expertise and judgment to discern between real security measures and common misconceptions. 

​​

The players are meant to use them as cheat sheets as well.

The most relevant roles for this game are: ​

• Chief Information Security Officers (CISOs) and IT security teams: They need to understand the  requirements for ICT risk management and security testing.

• Chief Risk Officers (CROs) and risk management teams: These professionals must be aware of its impact on operational risk management and resilience.

• Compliance officers: They are responsible for ensuring the institution adheres to DORA's regulatory requirements.

• IT managers and teams: They need to understand its technical requirements and implement necessary changes to IT systems and processes.

• Procurement and vendor management teams: These roles must be aware of DORA's implications for managing relationships with ICT third-party providers.

• Legal teams: They need to understand its legal implications and help ensure compliance.

• Business continuity managers: They must align business continuity plans with the legal requirements for operational resilience.

• Senior executives and board members: They should understand DORA's strategic implications and ensure appropriate resources are allocated for compliance.

• Internal audit teams: They need to be familiar with DORA to effectively audit the institution's compliance efforts.

• Data protection officers: They should understand how DORA intersects with GDPR and other data protection regulations.

These roles should collaborate to ensure a comprehensive understanding and implementation of DORA across the financial organisation.