Insights

Why the Criticality of a Business Function is Not a "Yes/No Question"

Since the first draft of the DORA (Digital Operational Resilience Act), many financial institutions have been facing the same question: "Which of my business functions are critical?" What sounds simple initially has developed in practice into a patchwork of completely different methods. Every institution uses its own approaches, criteria, and assessment logic. Uncertainty is high - and the question remains: "Which method is correct?"

Quirin Privatbank AG has selected the all-in-one platform “Leno” for DORA and Digital Resilience

Quirin Privatbank AG has selected the all-in-one platform “Leno” and is introducing the modules Third Party Risk Management (TPRM), Contract Lifecycle Management (CLM), and Information Security & Resilience (ISR). With this step, the bank is strengthening its outsourcing management, optimizing its GRC processes (Governance, Risk & Compliance), and consistently digitizing the implementation of the Digital Operational Resilience Act (DORA).

Complexity in Outsourcing Management – When Categories Become a Burden

In recent years, outsourcingand third-party risk management (TPRM) at many financial institutions havebecome increasingly complex. What once was a clearly structured process tomanage outsourced services has, in many organizations, turned into a confusingjungle of categories.

Digital Contract Management with Leno CLM

In today’s digital economy, companies are under increasing pressure toboost efficiency, minimize risks, and ensure compliance – all at the same time.Contracts are at the heart of every business relationship. They definepartnerships, secure revenue, and establish accountability. Yet, in manyorganizations, contract management is still dominated by manual processes,disorganized document structures, and a lack of transparency. A digital Contract Lifecycle Management (CLM) system provides the solution– forming the foundation for a modern, efficient, and audit-proof contractmanagement process.

5 Traps in TPRM and Contract Management – and How to Steer Clear of Them

Third Party Risk Management (TPRM) is no longer just a compliance issue – it has become a key component of modern corporate governance. Especially in regulated industries, structured third-party management is critical. Yet many risks don’t emerge in the risk report, but much earlier – in contract management. Siloed contract administration, missing or unclear provisions, and outdated documentation can quickly lead to avoidable risks. In this post, I’ll highlight five common pitfalls at the intersection of TPRM and contract management – and how to effectively avoid them.

TPRM under DORA – The 5 Most Common Mistakes in Classifying ICT Services

DORA requires precise classification of ICT services. This article highlights the 5 most common mistakes and how financial institutions can avoid them.

Goodbye “Outsourcing”? – The New EBA Consultation in Focus

The new EBA consultation replaces the previous outsourcing guidelines and significantly broadens the scope: going forward, all third-party arrangements, including non-ICT services, will fall under the risk management of financial institutions.