Tailored for resilience: Enabling DORA compliance through pragmatic Third-Party Risk Management
As regulatory pressure intensifies across Europe, financial institutions are navigating the complexities of the Digital Operational Resilience Act (DORA). For one leading Belgian player, compliance with DORA’s Third-Party Risk Management (TPRM) requirements demanded more than a generic checklist. It called for a pragmatic, tailored approach that balanced regulatory expectations with operational reality. Projective Group stepped in to design and implement a right-sized solution – one that delivered sustainable compliance without compromising efficiency or business continuity.
The client
A leading financial institution in Belgium, operating under a candidate license and recognised as one of the more prominent players in the sector. Recently, the institution sought support in achieving compliance with the Digital Operational Resilience Act (DORA), with a specific focus on Third-Party Risk Management (TPRM).
The challenge
To achieve full compliance with DORA, particularly around the TPRM pillar. The client needed a tailored approach that aligned with its specific risk appetite, outsourcing profile, and operational capacity—without compromising cost efficiency or sustainability of compliance.
Our approach
We began by conducting a tailored assessment, recognising that each financial institution’s business model, product suite, and operational scale vary significantly. Rather than applying a one-size-fits-all model, we grounded our work in DORA’s framework but adapted it pragmatically to the client’s posture and market position.
Our methodology emphasised:
- A proportional application of DORA requirements based on institution size and complexity
- Practical alignment with operational capabilities to ensure sustainable compliance
- Co-creation of client-specific policies (e.g. outsourcing policy) to embed compliance within existing structures
Key results
- Developed a fully customised outsourcing policy aligned with the client’s risk profile and operational reality
- Ensured DORA TPRM compliance without overburdening internal resources
- Established a compliance posture that is both regulator-ready and operationally sustainable
- Enabled the client to maintain compliance without compromising cost efficiency or business continuity
About Projective Group
Established in 2006, Projective Group is a leading Financial Services change specialist.
We are recognised within the industry as a complete solutions provider, partnering with clients in Financial Services to provide resolutions that are both holistic and pragmatic. We have evolved to become a trusted partner for companies that want to thrive and prosper in an ever-changing Financial Services landscape.