What everyone learned about their own organisation, too late to be comfortable

There’s a particular kind of discovery that happens during regulatory preparation, one that has less to do with the regulation and more to do with the organisation doing the preparing. Teams set out to build a DORA-compliant register of ICT third-party arrangements, and along the way discover something a little uncomfortable: nobody had actually been […]