A Frankfurt asset manager built DORA-ready resilience ahead of the deadline
Facing DORA, the firm needed provable operational resilience and tested recovery. Bebco delivered continuity it could evidence to the regulator.
Headline result
Tested recovery time for critical systems
A €4bn AUM asset manager in Frankfurt
Frankfurt, Germany
The challenge
What they were up against
The Digital Operational Resilience Act turned what had been internal good practice into a regulatory obligation. The firm could describe its backup arrangements on paper, but it had never tested a full recovery under pressure, and it could not produce the evidence a supervisor would expect: recovery time objectives, incident classification, and third-party risk registers.
Its trading and reporting systems could not tolerate a long outage. A failure during a settlement window would be both a commercial and a compliance event, and the board wanted certainty rather than assurances.
The solution
What Bebco did
Bebco mapped the firm's critical business services, set recovery objectives against each, and built continuity that could be tested and evidenced rather than merely documented.
- Implemented immutable, geographically separated backups with defined recovery point and recovery time objectives for every critical service.
- Ran a live failover exercise so the firm had a measured recovery time, not an estimate, and repeated it quarterly.
- Built the third-party and concentration-risk register DORA requires, covering every material technology supplier.
- Established an incident classification and reporting workflow aligned to the regulatory thresholds, with Bebco's team on call for major incidents.
The results
Measured, not estimated
Recovery time for critical systems, tested
Infrastructure availability over 12 months
Continuity tests run per year, evidenced
“For the first time we can show a regulator exactly how fast we recover, because we have measured it. That changed the board conversation entirely.”
Let's pressure-test your IT
Book a free, no-obligation assessment. We'll review your infrastructure, flag the risks, and show you exactly where Bebco would make a difference.