DORA Gap Analysis & Governance Support
A Swedish insurance company needed to know where its steering documents fell short of DORA. NCG ran the gap analysis, delivered a report with actions and owners, and supported the Security & Governance function by writing four internal steering documents.
Client Overview
Challenges Faced By Client
DORA applies from 17 January 2025. The client had updated its steering documents and needed an independent view of what was still missing.
- Uncertainty over remaining DORA gaps after document updates
- No single list of actions with named owners
- Steering documents missing for several security domains
- Limited capacity in the Security & Governance function
How NCG Helped
A clear gap report, then hands-on help closing the gaps.
DORA gap analysis
Compared the updated steering documents with DORA requirements, article by article.
Report with owners
Delivered a report setting out each gap, the recommended action and the responsible owner.
Steering document development
Wrote internal steering documents for Certificate Management, IT Continuity, IT Security and Information Security.
Security & Governance support
Executed tasks across multiple domains to add capacity to the function.
Solutions Implemented By NCG
A documented path to DORA compliance and the governing documents to support it.
- DORA gap analysis report
- Action plan with responsible owners
- Certificate Management steering document
- IT Continuity steering document
- IT Security and Information Security steering documents
