Service

DORA and AI governance.

Digital resilience and the responsible use of AI have become compliance topics. I translate DORA and the AI Act into concrete steps that suit the size of your organisation.

Arrange an introduction

A no-obligation conversation? Or would you rather email? ian@ikcomplianceadvies.nl

DORA

Since 17 January 2025, DORA, the EU regulation on digital operational resilience, has applied to banks, payment institutions, electronic money institutions and investment fund managers, among others.

A baseline assessment: where you stand on ICT risk management, incident reporting, testing and ICT service providers
An ICT risk management framework that suits your size
Drawing up and maintaining the register of information on your ICT service providers
A process for classifying and reporting ICT incidents
Reviewing contracts with ICT service providers against the DORA requirements

AI governance

AI is increasingly used in transaction monitoring, screening and credit assessment. The AI Act sets requirements for high-risk AI systems, such as credit scoring of individuals. These requirements apply from 2 December 2027.

An inventory of your AI applications and their risk class under the AI Act
Governance: ownership, documentation, human oversight and model monitoring
Explainability of AI in monitoring and screening, for your auditor and supervisor

Other services

Would you like to know where you stand on DORA or the AI Act?

Start with a baseline assessment. I usually respond within one working day. Prefer email? ian@ikcomplianceadvies.nl

Arrange an introduction