Copla Avis 

As a financial services company, we had quite a lot to prepare for DORA. We initially tried managing the requirements through spreadsheets and internal documentation, but it quickly became difficult to track everything. What we appreciated most about Copla was the combination of the platform and access to people who actually understand the regulation. Our dedicated CISO helped us prioritize the requirements and regularly checked our progress. The ICT third-party register and evidence management have been particularly useful. We now have a much clearer picture of our compliance status and what still needs attention.There are still some workflows that could be more automated, especially around updating vendor information, but the team has been responsive to our feedback. Overall, Copla has made managing DORA considerably less overwhelming.

We needed to get ISO 27001 certified but didn't have a dedicated compliance person, so most of the work was falling on our IT team alongside their regular responsibilities. Copla helped us understand what was missing and gave us a clear plan to work through. The biggest benefit was having a dedicated CISO wauditors would actually expect. The platform made it easier to assign tasks, track progress and keep all our evidence in one place. The guided policy creation also saved us from writing everything from scratch. The initial setup required more input from our team than we expected, but once we got through that, things moved much more smoothly. I'd recommend recommend Copla to companies working towards ISO 27001 without a large internal security team.ho could answer questions, review our documentation and explain what