READ
Case Studies Risk & Compliance

Tailored for resilience: Enabling DORA compliance through pragmatic Third-Party Risk Management

 

The challenge

  • Navigate DORA’s complex TPRM requirements with a proportional and sustainable approach.
  • Align compliance efforts with the client’s specific outsourcing profile and operational capacity.
  • Avoid overburdening internal teams while ensuring regulator-readiness.

 

Our approach

  • Conducted a tailored assessment grounded in DORA but adapted to the client’s risk appetite and market position.
  • Applied a pragmatic, right-sized methodology aligned with the institution’s size and complexity.
  • Co-created custom compliance policies, embedding them into existing structures and workflows.

 

Key results

  • Delivered a client-specific outsourcing policy aligned with regulatory and operational realities.
  • Enabled full DORA TPRM compliance without disrupting business continuity or straining resources.
  • Established a compliance model that is both cost-efficient and built for long-term resilience.
Date:June 2, 2025

As regulatory pressure intensifies across Europe, financial institutions are navigating the complexities of the Digital Operational Resilience Act (DORA). For one leading Belgian player, compliance with DORA’s Third-Party Risk Management (TPRM) requirements demanded more than a generic checklist. It called for a pragmatic, tailored approach that balanced regulatory expectations with operational reality. Projective Group stepped in to design and implement a right-sized solution - one that delivered sustainable compliance without compromising efficiency or business continuity.

The client 

A leading financial institution in Belgium, operating under a candidate license and recognised as one of the more prominent players in the sector. Recently, the institution sought support in achieving compliance with the Digital Operational Resilience Act (DORA), with a specific focus on Third-Party Risk Management (TPRM). 

The challenge 

To achieve full compliance with DORA, particularly around the TPRM pillar. The client needed a tailored approach that aligned with its specific risk appetite, outsourcing profile, and operational capacity—without compromising cost efficiency or sustainability of compliance. 

Our approach 

We began by conducting a tailored assessment, recognising that each financial institution’s business model, product suite, and operational scale vary significantly. Rather than applying a one-size-fits-all model, we grounded our work in DORA’s framework but adapted it pragmatically to the client’s posture and market position. 

Our methodology emphasised: 

  • A proportional application of DORA requirements based on institution size and complexity 
  • Practical alignment with operational capabilities to ensure sustainable compliance 
  • Co-creation of client-specific policies (e.g. outsourcing policy) to embed compliance within existing structures 

Key results 

  • Developed a fully customised outsourcing policy aligned with the client’s risk profile and operational reality 
  • Ensured DORA TPRM compliance without overburdening internal resources 
  • Established a compliance posture that is both regulator-ready and operationally sustainable 
  • Enabled the client to maintain compliance without compromising cost efficiency or business continuity 

About Projective Group

Established in 2006, Projective Group is a leading Financial Services change specialist.

We are recognised within the industry as a complete solutions provider, partnering with clients in Financial Services to provide resolutions that are both holistic and pragmatic.  We have evolved to become a trusted partner for companies that want to thrive and prosper in an ever-changing Financial Services landscape.