DORA leads to overlapping regulatory requirements in many areas. Examples include the register of information (DORA Art. 28(3)) and the register of outsourcing arrangements (MaRisk AT 9, para. 14), as well as risk analysis under DORA and risk analysis under MaRisk. The requirements are generally compatible. This partly results in a high level of technical and procedural complexity. As such, DORA pushes financial institutions to the limits of feasibility. Additional regulatory requirements such as the AI Act exacerbate the issue. The only way to handle compliance efficiently and with high quality is through the digitisation and automation of harmonised processes. ‘One topic—one process’ is the key principle here. Our philosophy is to translate all requirements into digital and automated processes.
This is based on many years of experience by our team in the fields of IT regulation, process automation, software development and IT security. Technology, process, and regulatory experts work hand in hand on the development and continuous enhancement of IQThirdParty.
Marcel Huy
18 years of experience in developing and designing core enterprise software.
Technology Lead
Markus Steinkötter
20 years of experience in management consulting and IT regulation for financial services.
Project Management Lead
Nicole Grunenberg
25 years of experience in financial services, including leading a corporate audit division.
Product Quality Lead
Timo Wind
7 years of experience in management consulting and software business.
User Experience Lead
Dr. Michael Grunenberg
25 years of experience in top-level management consulting and IT compliance.
Project Sponsor