DORA (Digital Operational Resilience Act) Regulation

DORA: How ROK Solution simplifies your compliance before the January 2025 deadline

⏳ The DORA Regulation Is Coming Into Effect Soon! On January 17, 2025, all financial institutions in the European Union will need to comply with the Digital Operational Resilience Act (DORA), an ambitious regulation designed to strengthen digital operational resilience against risks associated with information and communication technologies (ICT). However, according to a study conducted by the audit and consulting firm Grant Thornton, 75% of companies subject to DORA had initiated compliance work by the end of 2023, but most were still in the early stages of the process. At ROK Solution, we understand the challenges you face in ensuring the continuity of your operations and meeting these new requirements. This is why we have developed an intuitive, secure, and powerful platform to support you in achieving DORA compliance. What is DORA and why is it essential? The Digital Operational Resilience Act (DORA) establishes a common regulatory framework to ensure that financial institutions can withstand, recover, and continue their operations in the event of ICT-related disruptions. This regulation harmonizes digital resilience practices across the entire European financial ecosystem. DORA is essential because it: Strengthens digital security: Reduces vulnerabilities and IT risks. Protects the continuity of financial services: Ensures the resilience of critical services during crises. Harmonizes European practices: Establishes common standards to anticipate and respond to threats. Scope of application: DORA applies to a wide range of entities, covering over 18,000 financial institutions according to the EBA: Financial institutions: Banks, insurance companies, asset managers. Critical technology providers: Cloud service providers, SaaS, and strategic infrastructures. Fintechs and payment institutions: Innovative digital players integrated into the financial value chain. This scope ensures global resilience, addressing both internal and external dependencies. Main objectives: The main objectives of DORA are: Strengthen cybersecurity and reduce digital operational risks: Identify and mitigate vulnerabilities in ICT systems. Ensure the continuity of critical financial services by minimizing disruptions. Create a harmonized European framework: Standardize digital resilience practices across the sector. Enhance digital governance: Hold executives accountable for ICT risk management and ensure ongoing monitoring. Key requirements: According to the European Banking Authority (EBA), nearly 60% of companies affected by DORA were not yet compliant by the end of 2023. This exposes these organizations to costly operational disruptions and significant financial penalties. These fines can reach up to €10 million or 5% of total annual revenue, depending on the severity of non-compliance. ICT Risk Management: Identification, classification, and mitigation of critical vulnerabilities through dynamic controls and continuous assessments. Business Continuity: Development of robust plans and regular resilience testing with realistic scenarios (IT outages, cyberattacks). ICT Incident Monitoring: Proactive detection of incidents using metrics such as MTTD (Mean Time to Detect) and MTTR (Mean Time to Recover). Third-Party Supervision: Auditing and monitoring critical suppliers with a focus on risks related to the supply chain. Reporting and Traceability: Implementation of compliant dashboards (Excel, JSON, API formats) for tracking and reporting to authorities. Dedicated Governance: Involvement of executives in a proactive digital risk management strategy. How ROK Solution helps you meet DORA requirements 1. Mapping critical systems ROK Solution provides advanced tools to meet DORA requirements: Dynamic and automated mapping: Real-time synchronization with your existing IT tools such as CMDB (Configuration Management Database) or SIEM solutions. Identification of critical dependencies: Prioritization of mitigation plans through analyses based on dynamic scoring. Visualization of internal and external ICT flows: Enables optimized planning of continuity scenarios and impact assessments in case of disruptions. Auditable, compliant reports: Automatic provision of documents for internal and regulatory audits. 2. Simplified ICT risk management Our platform simplifies and automates proactive ICT risk management: Continuous assessment of vulnerabilities and threats with dynamic dashboards. Automation of corrective action prioritization to quickly address critical weaknesses. Generation of customized reports compliant with audits and DORA standards. 3. Business continuity and resilience testing With ROK Solution, create and manage robust business continuity plans: Preconfigured templates aligned with DORA standards to design your BCP/DRP plans. Realistic ICT crisis simulations with result analysis and improvement planning. Automated post-test reports to demonstrate compliance and track the effectiveness of actions. 4. Proactive incident monitoring ROK Solution ensures rapid and effective incident management: Advanced disruption detection: Integration of real-time monitoring tools with configurable alerts to minimize interruptions. Centralization of incident data: In-depth analysis and structured reporting for each event. Automation of corrective responses: Precise tracking of key metrics such as MTTD (Mean Time to Detect), MTTR (Mean Time to Recover), and MTTA (Mean Time to Acknowledge), ensuring continuous improvement in response times. 5. Supervision of critical ICT providers ROK Solution helps you manage your supplier relationships with optimized tools: Dedicated critical provider repository: Centralization of key information (performance, contracts, risk matrices) with dynamic tracking. Collaborative resilience testing: Coordination with suppliers to conduct shared crisis scenarios, including automated reports on their response capabilities. These scenarios are based on realistic simulations, such as critical system outages or targeted cyberattacks, and are co-developed with your suppliers to ensure a coordinated response. Continuous automated audits: Real-time monitoring of supplier compliance with DORA standards, including proactive detection of potential vulnerabilities in the supply chain. 6. Reporting and traceability ROK Solution simplifies the management of reporting obligations with: Interactive dashboards: Compatible formats (Excel, JSON, API) for seamless integration with existing systems. Real-time action traceability: Historical tracking of modifications and corrective measures for complete transparency during audits. Key performance indicators (KPIs): Measurement of critical timelines (MTTD, MTTR) to continuously optimize your resilience strategies. Why choose ROK Solution for your DORA compliance? An integrated solution: Centralize risk management, resilience testing, and supervision within a single platform. No-code technology assisted by generative AI: Configure customized workflows quickly, without requiring technical expertise. Accelerated compliance: Leverage ready-to-use templates to reduce deployment timeframes. Enhanced security: Ensure comprehensive protection of your sensitive data, compliant with European standards. Strategic collaboration: In partnership with SmartBot Consulting, benefit from advanced RPA and BPM solutions to optimize your processes. ROK Solution is one of the few platforms that combines centralized risk management, flexible no-code capabilities, and generative AI. This allows for the creation of

SAP : Simplification and Automation of ERP Systems in International Growth

Centralization and security of SAP access at scale International companies face increasing complexity in managing SAP access. To address these challenges, a solution like ROK centralizes and secures access, enhancing security, ensuring compliance, and optimizing costs. Challenges of rapid expansion Rapid growth: presence in multiple countries and a large number of employees across various sites, complicating SAP access management. SAP access security: ensuring secure and compliant access management for thousands of employees. Automation: automating role updates to minimize manual interventions. Cost reduction: centralizing access management and optimizing ERP costs. Measured results (ROI) 10x cost reduction Automated SAP access administration. 10x more scope Managed without staff increase. 5x shorter timelines SAP authorizations delivered faster. < €1000 monthly cost Support cost lower than competing solutions. 100% integration/b> Centralized management via CUA or directly. Optimized and automated SAP access management Standardization & automation Unified model applied across multiple countries for consistent international processes. Real-time automation of hires, transfers, and departures. Traceability and role optimization for efficient and compliant management. Rapid integration of new entities Accelerated deployment of new acquisitions. Automated onboarding via SAP HR, with access assigned based on responsibilities. Strict authorization security during integration. Cost optimization Fewer errors thanks to automation. Optimized IT and HR resources, reducing workload. ERP streamlining with centralized updates and role management. Architecture: strength and flexibility of the ROK implementation The diagram illustrates the centralized architecture implemented to manage SAP access at Elis, ensuring smooth and secure authorization management across all SAP systems. Management of functions, positions, and employees with assignment and organizational restrictions. Import processing by ROK Transcription of roles into an organizational chart. Gestion des postes et collaborateurs (création, modification, archivage). Assignment of business roles and functional restrictions. Sending of authorization data by ROK Automatic synchronization of roles (composite, simple, derived). Quick rights assignment, with access delivered within 1 hour.

Comparative advantages of ROK: integrated AI, streamlined automation, optimized workflow and application management

ROK innovates with integrated AI, free OCR, and simplified authorization management/automation. An intuitive and cost-effective platform for your complex workflows.

ROK Generativ: When AI Reinvents No Code

ROK announces the launch of a new version of its no-code platform, integrating a non-intrusive generative AI. This innovation brings speed, expertise, reliability, and security in the modeling of applications, robots, and processes. A Proven No-Code Foundation ROK is now recognized as the most secure no-code platform on the market (see article). Thanks to its user-friendly graphical interface, your non-technical employees can create complex applications or robots with simple drag-and-drop actions. The created applications can be connected to your information system without code, ensuring continuous integrity with your electronic directories in an expanded ecosystem. This guarantees real-time management of application rights and authorizations. Disruptive Innovation: ROK Generativ ROK Generativ disrupts the no-code world by allowing the delegation of application, robot, or process design to an exogenous AI (thus blind to your data) through a conversational interface integrated into the no-code platform. The experience is unique, and you can immersively view the graphical visualization in ROK of the application corresponding to your request (see video) https://youtu.be/UphtRGKNNZQ?si=aVLrXxMWD7by4TNB Another impressive feature is that ROK will assign collaborator accesses and application rights in real-time while the AI remains exogenous to ROK, ensuring your data’s confidentiality. The application, created in a few minutes, can be immediately published on the web or submitted to an amendment and validation process via ROK’s historical no-code application, including the validation workflow and lean management processes. The possibilities offered by this solution are limitless Creating Applications from Scratch ROK Generativ allows the creation of applications, robots, or formalizing processes without needing a detailed specification in advance. In a few minutes, submit your problem to the AI, which will propose a suitable solution. Tasks and IT connections are automatically assigned. You can interact with the AI to refine the solution before finalizing it in no-code and publishing it via ROK’s web interface. Real-Time Consulting Tools Consulting firms can use ROK Generativ to create applications live during needs analysis meetings with their clients. The AI, with its sectoral and regulatory knowledge, can assist junior consultants by providing specific insights. This allows for quickly providing a digital response to be validated or amended at the end of the meeting. The project management tools integrated into ROK will enable teams to be piloted through optimization processes. Content Centralization and Management Companies with formalized processes spread across various diverse and dispersed documents can benefit from ROK Generativ to centralize and standardize these contents. The ROK platform allows for the creation of an auditable and up-to-date repository with real-time access rights management. This is particularly useful for companies with stringent regulations or standardized operating protocols (banks, insurance, justice, pharmaceutical/medical…). In Summary ROK Generativ offers a highly operational solution that addresses confidentiality challenges while enabling the creation of complex and personalized workflows. Integrated with your organizations, directories, and information systems, this offering boosts innovation while maintaining strict control. It broadens your skills and accelerates digital transformation by empowering your business employees to create and innovate securely. Speed, innovation, and security are the keywords of this solution that will broaden the scope of possibilities. ia-news.fr digit-collab.com decideur-it.fr ntic-infos.fr disrupt-b2B.fr dsi-numerique.fr numeric-tools.com digital-frenchnation.com actu-dsi.fr itb2b-univers.com dsisionnel.com

An expert’s view: The necessary revolution of current BPM models

Why are BPM tools having a hard time on the markets when they should be praised for anticipating change, promoting evolution, containing risks and transmitting knowledge? Business Process optimization and Management tools are not properly operated in times of growth, and thus cannot properly function in times of austerity Like a pendulum, companies oscillate, according to changing economic situations, between innovation and rationalization. We do not see many optimization projects being carried out in times of prosperity, when these would be very useful in more dire times. It is even rarer to see investments in this type of tools in times of crisis, due to lack of time, resources, or because its implementation would be too complex and time-consuming. Entrepreneurs share responsibility in this situation, but we should acknowledge in all fairness, that publishers have yet to offer truly efficient, evident solutions. Existing solutions are too complex, designed for experts and fail to satisfy company operatives. BPM tools all participate, in their way, in organization formalization, modeling, optimization, motorization, feedback enrichment… However, they all suffer from over-specialization, as well as overly complex integration, configuration, and maintenance. Designed by experts for experts, with feedback from experts or at least specialized consultants, these solutions fail to reach actual employees, and their “top-down” approach, for lack of simplicity and flexibility, can only be operated by a handful of top specialists. They remain dogmatically cooped up in IS or quality services acting like sanctuaries, and follow company mutations instead of anticipating or supporting them. Today, employees and operatives need simpler tools, which allow them to gain back control over organization structures and risks, while using and capitalizing collaborator knowledge. It is high time we reconciled top white collars with other employees, but also Information Systems with the people operating them, by providing simpler, task-oriented, transversal tools that can be easily set up and used by everyone, giving managers new control over their department’s organization. Current models need to be redesigned. Organization structures need to be described and normalized simply, without needing to overwrite existing capitalized knowledge, even if it exists on multiple, seemingly incompatible platforms. Structures need to be accessible to everyone, for information and operation. A three-way solution: redefining IS management rules, associating risks and projects, federating staff and promoting task synergy throughout the company Information needs to be transmitted and shared naturally and effortlessly, which implies completely redefining old management paradigms that waste precious time by focusing on individual and group rights managements. Common sense dictates that this task should follow organic and systematic company rules. Risk must be a constant considered alongside an evolving organization structure, and we should have tools allowing to manage and contain them at all times. Finally, in order to exist and be sustained, organization management tools must not be isolated. They should communicate with the IS or HR services, support document and content management, and be used by all relevant services. The broader their reach, the better their performance, reactivity and efficiency. Conclusion BPM tools do have a promising future, provided they undergo a triple revolution. Once only for experts, they must become collaborative, contributive, even social, and should be manageable by operative staff, so that the added value coming from specialist and consultant knowledge may become the (high value) tip of the iceberg, instead of the submerged part, like it is today. Content integrity and control must not be handled by the IS, but rather supported by risk analysis, which must be integrated to the solution. Conserving their inherent specific expertise, these tools must be able to capitalize and distribute knowledge from and to everyone involved. When this revolution finally unfolds, assisted organization optimization will finally become the norm, whatever the economic situation may be. Such tools will allow to anticipate and support change, while managing subsequent risks, and making best practices available. They will finally gain popularity and spread to many sectors. They will be praised for their efficiency, their usefulness, and their obvious, immediate Return On Investment. This is about concept, technology, and models.

Software publishers: a “pure player” strategy

In today’s tense economic climate, IT industry professionals are looking for new organizational models allowing them to rapidly develop market shares and deepen their competitive edge. In this context, many approaches coexist with various positions, among which we can count direct sales, indirect, and mixed models. In this document, differences between each model will be explained, and we will see how a 100% indirect approach can lead to high value creation. The direct approach, traditionally used by leading publishers on the market, consists in integrally carrying out a project without the services of a consulting firm or integrator. This approach is very widespread on the other side of the Atlantic and less present in Europe. One can note it hardly fits strategies of smaller and medium-sized publishers, who do not have the necessary financial resources or “moral guarantee” of bigger publishing groups. Moreover, in times of crisis, this approach appears more limited, particularly for projects where specific business impact is at the heart of company challenges. The direct approach fits “transversal” technology better, since those require little to no configuration or added value. Installation and support can then be taken care of by in-house teams. The mixed approach consists in combining direct and indirect sale strategies throughout partner networks. Generally, we can observe that greater accounting projects are traditionally carried out by publishers, and that mid-market and SME projects are handled by indirect networks. Most of the time, medium sized publishers choose this approach, willing to complement their own teams with technical and commercial partners who allow them to access new opportunities on mid-market segments. What makes this approach difficult is the frontier between direct and indirect approaches, as well as managing a partner network that only handles parts of the projects (oftentimes the most time-consuming and least profitable aspects). In order for this approach to work, solid network incentive policies need to be established. The “pure player” approach is a 100% indirect strategy. Publishers focus on their own tasks: publishing software. Commercial development is handled by a partner network consisting of integrators, consulting firms and others. This strategy allows the network to generate high added value for their clients. This approach is particularly fitting for publishers who wish to provide solutions integrating business and organization specificities for each potential client company. The business and task-specific side of the project is then provided by partners thanks to the publisher’s platform, in order to deploy custom-made applications. Thanks to this model, relations between publisher and partners go beyond simple marketing partnerships, and lead to long-term industrial collaboration. An important aspect to consider is selecting partners very carefully. Partnership quality, more than quantity, is a crucial strategic element of this approach. Let us not forget that partners need to be supported and accompanied overtime, through formation, meetings, and network management. Investing time and resources to establish successful partnerships and letting partner sales managers get to know your solution is fundamental. Considering these three sales models, we can notice that many publishers tend to focus on the publishing side of their business, rather than service. Undoubtedly, this approach should soon garner popularity and integrators deliver high added value, which can be explained by the evolution of company demand, with clients expecting solutions to be more and more polished and adapted to their specific business challenges. Olivier BOURROUILH, ROK Solution CEO

ROK – A driving force for franchises

ROK’s platform aims to allow franchise network leaders to share good practices that set them apart, use business references, optimize performances and monitor franchisees’ activities. ROK Solution, publisher of a Collaborative Intelligence solution, presents a cutting-edge platform that allows to generate franchise-related practices, manage networks efficiently, monitor franchisees’ activities, and optimize their formation. Franchisors and franchisees alike can then use a single interface to perform and collaborate more efficiently. ROK’s platform aims to allow franchise network leaders to share good practices that set them apart, use business references, optimize performances and monitor franchisees’ activities. In order to make this structure work, information and business know-how need to be combined, structured, organized, and shared efficiently. ROK’s platform has been designed to meet this very type of requirement. By putting franchisee activities back at the heart of its strategy, ROK allows franchisors to optimize their network in real time. The platform’s organic and systematic approach, with patented algorithms, allows franchise professionals to navigate various departments and hubs in their activity sector. The tools available for network leaders allow them to collaborate and communicate, easily and transparently, with anyone in their franchise network. ROK helps generate the synergies required to carry out franchise network projects. In short, ROK Solution allows companies to: Optimize franchisor-franchisee relations Work and exchange in real time, on a common platform Share and capitalize on franchise deals (know-how, methods, communication, marketing) Provided dedicated hubs for each partner Boost network performance It is crucial for franchisors to transmit know-how and capitalized methods in order to support franchisees successfully. Using Knowledge Management tools and collaborative platform is a fundamental aspect of this process. ROK’s solution allows to access all the necessary tools to put franchisees in constant contact with network leaders, who will in turn be able to monitor and inform them in real time.

ROK Solution and the ROK Store: a Collaborative Intelligence Revolution

ROK Solution, publisher of a collaborative intelligence solution that helps structure and share company know-how efficiently, announces ROK version 3. Far from stopping there, ROK presents their ROK Store, which will allow companies to access business reference sheets relevant to their sector, and integrate them in real time. ROK 3.0 combined with the ROK store makes the cornerstone of a highly-operational offer, dedicated to performance optimization for companies and their collaborators. A groundbreaking new concept Collaborative intelligence aims to allow company collaborators to pool their knowledge and know-how to carry out projects or optimize their daily workflow. For such a system to work, heterogeneous information and expertise need to be combined, structured, organized, and shared efficiently. Designed for company operatives, ROK’s platform puts end-users back at the heart of their approach and allows to capitalize on immaterial company assets so as to improve performance and flexibility. The platform’s organic and systematic approach, which uses patented algorithms, allows users to navigate various departments and hubs in their company. These tools allow them to collaborate easily and transparently with anyone in their work environment. ROK helps generate the synergies required to carry out company projects. A unique user experience By getting rid of conventional navigation bars and drop-down menus, ROK seeks to redesign management tools. Users are organically immersed in their work environment. ROK’s interface offers a new vision of Human-Machine Interaction. This innovation allows to consider the human side of organization. IS rights management is automated, and document transfers are completely secure, making processes only accessible by the relevant collaborators. Users are instantly recognized by the platform, making it unnecessary to browse contextual menus. All the necessary information comes to the relevant users without them needing to spend a minute looking for it. ROK Store, immediate access to business reference descriptions ROK goes beyond the platform itself and follows through, announcing the ROK Store. ROK Store allows to instantly integrate specific references, as well as business and sectorial know-how, adapt it to specific needs, and deploy it in a structured, operational manner. ROK Store also allows consultants and experts to share knowledge with all platform users, who can in turn access a number of applications, free or paid, in order to structure their own organization. More than a simple database, ROK Store is a true pool of high-potential business knowledge, which can be directly integrated as a ROK app. ROK Store puts an end to operation managers’ nightmares, sparing them the need to start new projects completely from scratch.

ROK Solution claims 1st place at the Finance Innovation award

In front of more than 200 bank and insurance leaders, Global cluster Finance Innovation and Microsoft have awarded Olivier Bourrouilh, ROK Solution CEO with the Microsoft Finance Innovation Award, 1st place. This award is given every year to the most innovative startup companies who develop solutions for finance with Microsoft technology. ROK Solution’s product is a highly relevant offer, which can significantly help generate value for banks, insurance companies, or capital markets (Corporate and Investment Banking). Their unique, forward-thinking solution was developed on the latest Microsoft technology and features high performance and ergonomics. All these elements make this reward very well-deserved. In a highly-regulated market environment, ROK helps ensure system integrity and conformity. ROK Solution integrates risk and conformity management tools into one platform, along with process execution, secure data management and knowledge transmission via a unified collaborative communication system. In the specific context of Solvency II and Basel 3 regulatory frameworks, which have been pushed forward by the economic crisis situation, ROK is the only integrated solution to consider both risks and organization, and offer a response to the issues these texts deal with. Thanks to its easy implementation and installation made possible by Cloud technology, ROK provides a fast operational solution to financial institutions that need to follow these regulations, ensuring immediate ROI. ROK has already received numerous awards and distinctions in France and abroad (France Innovation, Microsoft, Oséo, Red Herring…) In direct continuity with this announcement, we will organize an official presentation and launch event for our platform, on April 12th. More than 120 invited attendees have confirmed their presence, among whom major leaders and decision-makers, who will give speeches during our presentation.

Competitiveness “for Dummies”, a message from the CEO

Going back to Olivier Bourrouilh, ROK Solution CEO’s column on French newspaper lecercle.lesechos.fr In a global market economy, being competitive is no longer an option, it’s about survival. “I strongly reject shortcuts and simplifications of a somewhat political and controversial nature, which tend to undermine the issue, limiting it to a question of costs, financial, legal or custom-related protection. I reject this because survival is at stake; the situation is more than urgent and actions need to be taken. I reject this because there are tools and technology available that would quickly allow us to gain a competitive edge. But in order to deal with a threat, or better yet, use it to our advantage, we must perform a proper diagnosis. We are talking about competitive advantage here, nothing more but nothing less either. This involves markets, products and technology. Provided you haven’t already used methods like absorbing or taking out your competitors, you must consider these two: innovation and optimization. There is no alternative. Innovation is in my opinion the best method. It consists in delivering a unique and relevant service, which comes from successful R&D, with relatively high prices, margins, and shielded by patents and other protections. Lower margins were once exclusive to industrialized countries. When emerging countries entered global markets, they conveyed lower budgets and considerably weakened competition, in a very short time. Succeeding in innovation rarely consists in only waiting by a tree for apples to fall on your head. Innovating may be a costly endeavor, but above all, I think it happens thanks to well-structured, coordinated, documented collaboration which is closely monitored in real time and optimized with feedback. The Web was invented by researchers who needed to communicate to make progress and succeed; today we see collaborative solutions appear, that allow dynamic organization and online collaboration, conveying necessary information and methods, automating the learning process, and transmitting data via voice, image and text. These solutions are efficient when they rest on Cloud technology and user-friendly, even vector interfaces, opening the way to new, scalable navigation. Innovating at low costs today is possible, and it is new. This kind of innovation has more to do with (collaborative!) intelligence than investments. The second method is about optimization, but in a broader sense than only unit costs indicators. Costs are a sensible matter, undoubtedly, but have you never, as a manager, had to deal with ignorant, incompetent, unreactive, or even outright lazy collaborators? Have you ever considered what profit could amount from optimizing the way collaborators work by only 5 or 10%, instead of laying employees off in equal proportions, losing potential value in the process? Optimizing organization structures, sharing and capitalizing on knowledge -from the company as well as its ecosystem- was often a moot point, because it rested on complex tools (BPM, BPA, WF, CM, KM and so on) that were hard to set up, integrate, share and adapt to your company’s obvious mutations. Today, solutions exist and they are integrated, scalable thanks to Cloud technology, and they feature accessible interfaces. They can be quickly implemented, you can adapt costs to your requirements thanks to the SaaS model, and they are immediately operable. It is very frustrating to see we have immediate solutions available but do not use them; because in doubt, it may be easier to believe the solution doesn’t entirely depend on us. The available technology has evolved formidably. Younger generations are already adopting them completely, for fun. Let us take time to reconsider our old reflexes, look at the situation from a higher angle, and embrace this new challenge that web tech advances offer us. After the “web springs”, let us be actors of this competition strategy revolution.” Author’s note: “Just imagine what could happen to DMV administration waiting lines if we put these solutions at their disposal…” Olivier Bourrouilh, ROK Solution CEO

Category: Competitiveness