LESEN
Case Risk & Compliance

Tailored for resilience: Enabling DORA compliance through pragmatic Third-Party Risk Management

 

The challenge

  • Navigate DORA’s complex TPRM requirements with a proportional and sustainable approach.
  • Align compliance efforts with the client’s specific outsourcing profile and operational capacity.
  • Avoid overburdening internal teams while ensuring regulator-readiness.

 

Unser Ansatz

  • Conducted a tailored assessment grounded in DORA but adapted to the client’s risk appetite and market position.
  • Applied a pragmatic, right-sized methodology aligned with the institution’s size and complexity.
  • Co-created custom compliance policies, embedding them into existing structures and workflows.

 

Key results

  • Delivered a client-specific outsourcing policy aligned with regulatory and operational realities.
  • Enabled full DORA TPRM compliance without disrupting business continuity or straining resources.
  • Established a compliance model that is both cost-efficient and built for long-term resilience.
Date:June 2, 2025

As regulatory pressure intensifies across Europe, financial institutions are navigating the complexities of the Digital Operational Resilience Act (DORA). For one leading Belgian player, compliance with DORA’s Third-Party Risk Management (TPRM) requirements demanded more than a generic checklist. It called for a pragmatic, tailored approach that balanced regulatory expectations with operational reality. Projective Group stepped in to design and implement a right-sized solution - one that delivered sustainable compliance without compromising efficiency or business continuity.

The client 

A leading financial institution in Belgium, operating under a candidate license and recognised as one of the more prominent players in the sector. Recently, the institution sought support in achieving compliance with the Digital Operational Resilience Act (DORA), with a specific focus on Third-Party Risk Management (TPRM). 

The challenge 

To achieve full compliance with DORA, particularly around the TPRM pillar. The client needed a tailored approach that aligned with its specific risk appetite, outsourcing profile, and operational capacity—without compromising cost efficiency or sustainability of compliance. 

Our approach 

We began by conducting a tailored assessment, recognising that each financial institution’s business model, product suite, and operational scale vary significantly. Rather than applying a one-size-fits-all model, we grounded our work in DORA’s framework but adapted it pragmatically to the client’s posture and market position. 

Our methodology emphasised: 

  • A proportional application of DORA requirements based on institution size and complexity 
  • Practical alignment with operational capabilities to ensure sustainable compliance 
  • Co-creation of client-specific policies (e.g. outsourcing policy) to embed compliance within existing structures 

Key results 

  • Developed a fully customised outsourcing policy aligned with the client’s risk profile and operational reality 
  • Ensured DORA TPRM compliance without overburdening internal resources 
  • Established a compliance posture that is both regulator-ready and operationally sustainable 
  • Enabled the client to maintain compliance without compromising cost efficiency or business continuity 

Über Projective Group

Gegründet im Jahr 2006 ist die Projective Group ein führender Spezialist für Change im Financial Service Bereich.

In der Branche sind wir als umfassender Lösungsanbieter anerkannt und arbeiten partnerschaftlich mit unseren Kunden zusammen, um ganzheitliche und pragmatische Lösungen zu bieten. Wir haben uns zu einem vertrauenswürdigen Partner für Unternehmen entwickelt, die in einer sich ständig wandelnden europäischen Finanz- und Unternehmenslandschaft erfolgreich sein und wachsen möchten.