Fund managers, securities firms, wealth managers, family offices
Financial firms
Fund managers, securities firms and wealth managers have to show their supervisor and their investors how IT is run, and by whom. We give you the contracts, the data and the evidence that stand up to both.
Software we keep running
- Microsoft 365
- Entra ID
- Intune
- SharePoint
- Teams
What’s at stake
DORA reaches your IT provider.
Contracts with the right terms
Since 17 January 2025, every ICT contract of a firm within DORA needs the terms in Article 30. Contracts for critical or important functions need more, including audit rights and exit terms.
A register that names your providers
Your register of information lists every ICT provider with its identifier, its parent company and what you pay, ready for your supervisor.
Investors check you, and your suppliers
Due-diligence questionnaires ask how you choose and oversee IT providers, and whether your key suppliers have independent assurance reports.
What we put in place
What we deliver.
- A DORA contract addendumThe Article 30 terms ready to sign, including help with incidents at a cost agreed in advance, and the extra terms for critical or important functions where they apply.
- Data for your registerOur company identifiers, parent company, services and costs, delivered in the form your register needs.
- A tested exit planHow you would move to another provider, written down and tested, so the exit strategy DORA requires for critical or important functions exists before you need it.
- Evidence for due diligenceAccess reviews, dated restore tests, incident records and the security baseline in one evidence file for investors’ questionnaires.
- Microsoft 365, hardened and documentedMulti-factor sign-in, protected admin accounts, managed devices and a written security baseline, with every change on record.
- Family offices, same standardMost single family offices fall outside DORA; one with its own licence does not. Both get the same controls and evidence, because families and banks ask the same questions.
Proof
What we can show today.
- Security practices aligned with ISO/IEC 27001, and we’ll tell you plainly what that covers and what it doesn’t.
- We’ve run IT for fund managers and law firms for years, alongside our engineering and architecture clients.
Start
Where does your firm stand?
In a first call we go through what your supervisor and your investors will ask about your IT and your providers, and how we’d meet it. The legal assessment stays with you.
- No first level
- No surprises
- Pilot before you buy