The job was never to remove the risk

I used to measure myself by the risks I'd eliminated. The list never got shorter, and that changed what I think the job actually is.

Jul 28 • Andrey Gubarev

April 2026

What Actually Happens in Your First Year of Security After Licensing

It's a build project with a deadline, not an operations hire. Here's what the first 12 months look like and what regulators check first.

Apr 1 • Andrey Gubarev

February 2026

DORA Documents Library (doralib.fromciso.com): A Practical Guide for DORA Readiness

I got tired of hunting DORA sources across five EU portals. So I built a library. Here's how to use it in your compliance workflow.

Feb 16 • Andrey Gubarev

January 2026

Turn the DORA Library into a 24/7 AI Assistant (Free) with NotebookLM

A step-by-step guide to uploading the full DORA document set into NotebookLM and querying it with citations.

Jan 26 • Andrey Gubarev

6

The DORA Library: All 27 Regulatory Documents in One Place

Stop drowning in EUR-Lex tabs. Bookmark the definitive, curated list of every Regulation, RTS, ITS, and Guideline for CTOs, CISOs, and GRC leads.

Jan 16 • Andrey Gubarev

6

August 2025

7 Resilience KPIs Every Fintech CTO Should Use under DORA

Discover 7 key Resilience KPIs for fintech CTOs to measure resilience and communicate progress to both technical and business leaders.

Aug 1, 2025 • Andrey Gubarev

2

July 2025

11 Practical Steps to Master Your DORA Compliance Audit

Take control of your DORA compliance audit with these clear, actionable tactics designed specifically for fintech CTOs aiming to eliminate audit…

Jul 2, 2025 • Andrey Gubarev

2

June 2025

DORA Proportionality: Right-Sizing Compliance for FinTechs

DORA Proportionality made practical: CTO roadmap to tailor ICT risk controls, automate incident reporting, and streamline third-party oversight for…

Jun 26, 2025 • Andrey Gubarev

2

DORA Compliance Roadmap for Fintech CTOs

Six months past DORA’s Jan 17, 2025 deadline, a 5-step roadmap for fintech CTOs to close compliance gaps and build true digital resilience.

Jun 9, 2025 • Andrey Gubarev

DORA Compliance: Structuring CTO–CISO Roles for Resilience

A hands-on playbook that turns DORA from a compliance headache into board-level resilience—clear CTO/CISO roles

Jun 3, 2025 • Andrey Gubarev

2

April 2025

Board Accountability in DORA – Setting the Tone at the Top

How the EU’s DORA transforms cyber-resilience into board-level accountability—and a strategic edge.

Apr 30, 2025 • Andrey Gubarev

1

1