Why DORA Will Break Your Firm If You Treat It Like IT Compliance

Is your firm treating DORA like another IT problem? According to Charles Ford, that mindset could cost you your reputation, and maybe even your regulatory standing.

With two decades of experience in third-party and operational risk, Ford warns that many financial institutions are still dangerously misaligned on DORA. Some firms only discovered their reporting obligations days before deadlines, revealing a disconnect between risk functions and business leadership that could be fatal under real pressure.

Ford doesn’t just call for compliance; he demands cultural transformation. DORA’s goal is systemic stability, not document filing. Yet firms still silo responsibility in IT or business continuity teams, failing to embed operational resilience into core governance and decision-making.

The kicker? Real success lies in predictive, continuous monitoring powered by high-quality data and robust risk intelligence, something many in banking, asset management, and insurance have yet to master.