LIRE
Case Studies Risk & Compliance

Tailored for resilience: Enabling DORA compliance through pragmatic Third-Party Risk Management

 

Le défi

  • Navigate DORA’s complex TPRM requirements with a proportional and sustainable approach.
  • Align compliance efforts with the client’s specific outsourcing profile and operational capacity.
  • Avoid overburdening internal teams while ensuring regulator-readiness.

 

Notre approche

  • Conducted a tailored assessment grounded in DORA but adapted to the client’s risk appetite and market position.
  • Applied a pragmatic, right-sized methodology aligned with the institution’s size and complexity.
  • Co-created custom compliance policies, embedding them into existing structures and workflows.

 

Principaux résultats

  • Delivered a client-specific outsourcing policy aligned with regulatory and operational realities.
  • Enabled full DORA TPRM compliance without disrupting business continuity or straining resources.
  • Established a compliance model that is both cost-efficient and built for long-term resilience.
Date:June 2, 2025

As regulatory pressure intensifies across Europe, financial institutions are navigating the complexities of the Digital Operational Resilience Act (DORA). For one leading Belgian player, compliance with DORA’s Third-Party Risk Management (TPRM) requirements demanded more than a generic checklist. It called for a pragmatic, tailored approach that balanced regulatory expectations with operational reality. Projective Group stepped in to design and implement a right-sized solution - one that delivered sustainable compliance without compromising efficiency or business continuity.

The client 

A leading financial institution in Belgium, operating under a candidate license and recognised as one of the more prominent players in the sector. Recently, the institution sought support in achieving compliance with the Digital Operational Resilience Act (DORA), with a specific focus on Third-Party Risk Management (TPRM). 

The challenge 

To achieve full compliance with DORA, particularly around the TPRM pillar. The client needed a tailored approach that aligned with its specific risk appetite, outsourcing profile, and operational capacity—without compromising cost efficiency or sustainability of compliance. 

Our approach 

We began by conducting a tailored assessment, recognising that each financial institution’s business model, product suite, and operational scale vary significantly. Rather than applying a one-size-fits-all model, we grounded our work in DORA’s framework but adapted it pragmatically to the client’s posture and market position. 

Our methodology emphasised: 

  • A proportional application of DORA requirements based on institution size and complexity 
  • Practical alignment with operational capabilities to ensure sustainable compliance 
  • Co-creation of client-specific policies (e.g. outsourcing policy) to embed compliance within existing structures 

Key results 

  • Developed a fully customised outsourcing policy aligned with the client’s risk profile and operational reality 
  • Ensured DORA TPRM compliance without overburdening internal resources 
  • Established a compliance posture that is both regulator-ready and operationally sustainable 
  • Enabled the client to maintain compliance without compromising cost efficiency or business continuity 

A propos de Projective Group

Établi en 2006, Projective Group est un spécialiste du changement dans le secteur des services financiers.

Nous sommes reconnus dans l'industrie comme un fournisseur de solutions complètes, en partenariat avec des clients des services financiers pour fournir des solutions qui sont à la fois holistiques et pragmatiques. Nous avons évolué pour devenir un partenaire de confiance pour les entreprises qui veulent prospérer dans un paysage des services financiers en constante évolution.