Leader in: Sourcing (incl D365, & Salesforce), Obtaining DORA Compliance, ICT Benchmarking (all towers), ITIL and ISO Standards
41 weeks to go until DORA becomes law and some organisations will blame those pesky procurement folks for DORA penalties incurred in 2025. It seems that in FS and Third-Party Provider that everyone in management is very busy and they all assume that someone else has picked up DORA. Procurement will likely be involved if external assistance is needed on DORA e.g., for Legal and Compliance Assistance, but Procurement rely on information from others to do their job. We know that the big banks are progressing DORA at pace but many mid-size and most small FS firms are still in the 'does DORA apply to us?' stage. DORA has over 250 control objectives to be assessed for compliance. Existing contracts with TPPs need to consider over 100 DORA related obligations which need to be negotiated and agreed, including who pays the hefty invoice from the Lead Overseer when they do a detailed DORA audit of the TPP? DORA should not stand for Dead On Regulator Audit DORA is about improving Operational Resilience to protect the whole FS industry. By the way Procurement is most likely NOT to blame if your FS firm or TPP receives a penalty. #DORA #DORACOMPLIANT.COM #DORALITE #DORATPP #INFOSYS #TCS #HEXAWARE #COFORGE #COMPUTACENTRE #HCLTECH #LTIMINDTREE #CAPGEMINI #FUJITSU #MPHASIS #DXC #COGNIZANT #ACCENTURE #WIPRO #DELOITTE #TECHMAHINDRA #EY #IBM #ATOS #SCC #CAPITA #CGI #BT #SOPRASTERIA #NTTDATA #GETRONICS
