Insights from the
front line

The gaps Finvisor is identifying most consistently across client portfolios: incomplete or inaccurate Registers of Information, ICT incident classification procedures that do not meet the regulatory threshold, and third-party concentration risk that has not been analysed at board level. The analysis below covers DORA as it is being supervised in practice — not as it was intended at the time of publication.