DORA (Digital Operational Resilience Act) Regulation

DORA: How ROK Solution simplifies your compliance before the January 2025 deadline

⏳ The DORA Regulation Is Coming Into Effect Soon! On January 17, 2025, all financial institutions in the European Union will need to comply with the Digital Operational Resilience Act (DORA), an ambitious regulation designed to strengthen digital operational resilience against risks associated with information and communication technologies (ICT). However, according to a study conducted by the audit and consulting firm Grant Thornton, 75% of companies subject to DORA had initiated compliance work by the end of 2023, but most were still in the early stages of the process. At ROK Solution, we understand the challenges you face in ensuring the continuity of your operations and meeting these new requirements. This is why we have developed an intuitive, secure, and powerful platform to support you in achieving DORA compliance. What is DORA and why is it essential? The Digital Operational Resilience Act (DORA) establishes a common regulatory framework to ensure that financial institutions can withstand, recover, and continue their operations in the event of ICT-related disruptions. This regulation harmonizes digital resilience practices across the entire European financial ecosystem. DORA is essential because it: Strengthens digital security: Reduces vulnerabilities and IT risks. Protects the continuity of financial services: Ensures the resilience of critical services during crises. Harmonizes European practices: Establishes common standards to anticipate and respond to threats. Scope of application: DORA applies to a wide range of entities, covering over 18,000 financial institutions according to the EBA: Financial institutions: Banks, insurance companies, asset managers. Critical technology providers: Cloud service providers, SaaS, and strategic infrastructures. Fintechs and payment institutions: Innovative digital players integrated into the financial value chain. This scope ensures global resilience, addressing both internal and external dependencies. Main objectives: The main objectives of DORA are: Strengthen cybersecurity and reduce digital operational risks: Identify and mitigate vulnerabilities in ICT systems. Ensure the continuity of critical financial services by minimizing disruptions. Create a harmonized European framework: Standardize digital resilience practices across the sector. Enhance digital governance: Hold executives accountable for ICT risk management and ensure ongoing monitoring. Key requirements: According to the European Banking Authority (EBA), nearly 60% of companies affected by DORA were not yet compliant by the end of 2023. This exposes these organizations to costly operational disruptions and significant financial penalties. These fines can reach up to €10 million or 5% of total annual revenue, depending on the severity of non-compliance. ICT Risk Management: Identification, classification, and mitigation of critical vulnerabilities through dynamic controls and continuous assessments. Business Continuity: Development of robust plans and regular resilience testing with realistic scenarios (IT outages, cyberattacks). ICT Incident Monitoring: Proactive detection of incidents using metrics such as MTTD (Mean Time to Detect) and MTTR (Mean Time to Recover). Third-Party Supervision: Auditing and monitoring critical suppliers with a focus on risks related to the supply chain. Reporting and Traceability: Implementation of compliant dashboards (Excel, JSON, API formats) for tracking and reporting to authorities. Dedicated Governance: Involvement of executives in a proactive digital risk management strategy. How ROK Solution helps you meet DORA requirements 1. Mapping critical systems ROK Solution provides advanced tools to meet DORA requirements: Dynamic and automated mapping: Real-time synchronization with your existing IT tools such as CMDB (Configuration Management Database) or SIEM solutions. Identification of critical dependencies: Prioritization of mitigation plans through analyses based on dynamic scoring. Visualization of internal and external ICT flows: Enables optimized planning of continuity scenarios and impact assessments in case of disruptions. Auditable, compliant reports: Automatic provision of documents for internal and regulatory audits. 2. Simplified ICT risk management Our platform simplifies and automates proactive ICT risk management: Continuous assessment of vulnerabilities and threats with dynamic dashboards. Automation of corrective action prioritization to quickly address critical weaknesses. Generation of customized reports compliant with audits and DORA standards. 3. Business continuity and resilience testing With ROK Solution, create and manage robust business continuity plans: Preconfigured templates aligned with DORA standards to design your BCP/DRP plans. Realistic ICT crisis simulations with result analysis and improvement planning. Automated post-test reports to demonstrate compliance and track the effectiveness of actions. 4. Proactive incident monitoring ROK Solution ensures rapid and effective incident management: Advanced disruption detection: Integration of real-time monitoring tools with configurable alerts to minimize interruptions. Centralization of incident data: In-depth analysis and structured reporting for each event. Automation of corrective responses: Precise tracking of key metrics such as MTTD (Mean Time to Detect), MTTR (Mean Time to Recover), and MTTA (Mean Time to Acknowledge), ensuring continuous improvement in response times. 5. Supervision of critical ICT providers ROK Solution helps you manage your supplier relationships with optimized tools: Dedicated critical provider repository: Centralization of key information (performance, contracts, risk matrices) with dynamic tracking. Collaborative resilience testing: Coordination with suppliers to conduct shared crisis scenarios, including automated reports on their response capabilities. These scenarios are based on realistic simulations, such as critical system outages or targeted cyberattacks, and are co-developed with your suppliers to ensure a coordinated response. Continuous automated audits: Real-time monitoring of supplier compliance with DORA standards, including proactive detection of potential vulnerabilities in the supply chain. 6. Reporting and traceability ROK Solution simplifies the management of reporting obligations with: Interactive dashboards: Compatible formats (Excel, JSON, API) for seamless integration with existing systems. Real-time action traceability: Historical tracking of modifications and corrective measures for complete transparency during audits. Key performance indicators (KPIs): Measurement of critical timelines (MTTD, MTTR) to continuously optimize your resilience strategies. Why choose ROK Solution for your DORA compliance? An integrated solution: Centralize risk management, resilience testing, and supervision within a single platform. No-code technology assisted by generative AI: Configure customized workflows quickly, without requiring technical expertise. Accelerated compliance: Leverage ready-to-use templates to reduce deployment timeframes. Enhanced security: Ensure comprehensive protection of your sensitive data, compliant with European standards. Strategic collaboration: In partnership with SmartBot Consulting, benefit from advanced RPA and BPM solutions to optimize your processes. ROK Solution is one of the few platforms that combines centralized risk management, flexible no-code capabilities, and generative AI. This allows for the creation of

ROK Solution selected in the RED HERRING Europe Top 100

American magazine Red Herring has selected ROK Solution out of 1000 international companies for the Red Herring Global Award, which rewards the most promising international technology companies. The famous American magazine has selected the most innovative actors in the High Tech sector, and evaluated them on quantity and quality criteria, such as the level of technology innovation, market size, client references, and financial health.

ROK Solution slated for French Tech Tour ’12.

ROK Solution, publisher of a Collaborative Intelligence platform, has been selected to attend the famous French Tech Tour 2012. For ROK, this is a year of innovation and consecration, as success and awards keep piling up: 1st place Microsoft Finance Innovation Award, successful fundraisers, and now tickets for the French Tech Tour 2012! For this event, ROK will benefit from a few advantages: Meeting preparation and coaching with American professionals. Several workshops to get a better picture of how business is done in the United States One-on-one meetings with the most relevant potential partners, among major American and global companies Several networking events organized in the Silicon Valley Olivier BOURROUILH, ROK Solution CEO: “I am delighted to have been selected for this event, among the best IT industry professionals in France. The interest that American businesses have shown for our solution proves our position as innovators on the market and will allow us to shake hands with American giants. This will open the door to new synergies and a great potential for growth.”

Back from the French Tech Tour, the CEO speaks up

Olivier Bourrouilh: “A Venture Capitalist told me ‘If your product does what you say it does, your competitors will shake in their boots…’ and I can tell you, it does that, and even more”. Hello Olivier, thank you for taking a few moments to answer our questions after this thrilling week. As the platform’s creator, you presented ROK Solution on the American market. Tell us a bit about the Silicon Valley. Olivier Bourrouilh: It was pretty cool. Traffic jams look like what we see in Paris during a weekend of May. Weather is not too hot, yet sunny, all the major companies are there… settled into small towns (Cisco town, Ebay town…). It’s huge, but there’s still room for more. In our previous posts, we had presented the schedule for this week, organized by Ubifrance. Let’s go back to the first chapter of this adventure: preparation, which took place over 4 days. It had been a long time since I’d felt so “powerless”: presenting a solution like ROK, with all the possibilities it offers, in less than 5 minutes… I didn’t think I could get ready in time for the conference. They say it’s normal. In the US, children learn to “pitch” things out when they’re 5… Would you have felt any better? Well, three days later, here I was, pitching in front of 300 American IT industry leaders (you know those who’ve known how to do this since they’ve been 5…) at Gen Internet 2. In 4 minutes, they had understood what ROK was about. Many thanks to our sensational coach Erica Lee, we did it! All this preparation was necessary to present the product under the best conditions to all the greatest IT companies in the Silicon Valley. How did that go? Who did you get to meet? What was their reaction to the product? With my B to B product, I landed a lot less meetings than some of my “conference-mates”, who had presented more demonstrative, broader, consumer-oriented solutions. It’s not easy to talk about organization, optimization, risks and processes after a Velsalis pitch (they were excellent). They have most of their presentations done by models. This much is a good start to get you going. That being said, I was able to get three main messages across to the audience during my presentation: Our product and our vision is exactly what companies are waiting for, even though some doubt it can work. A Venture Capitalist told me “if your product says what you say it does, competitors will shake in their boots…”. I was also approached by one of the global leaders in this type of solutions, whom I saw more as a competitor than potential partner before. I know company leaders are on the move, but they’re not quite there yet. Everyone loved our tech (I’m talking about the architecture, code and HMI): people know we have really good engineers in France, and particularly at ROK Solution: thanks to the team! The US are a real opportunity. The scale of potential deals and partnerships was incomparable to what we have in Europe. I had great talks with companies like Nokia, Microsoft, LG, British Telecom, Cisco, Inter-American Development Bank, AT&T and SAP, for example. Follow-ups will tell whether this can lead to actual contracts. What surprised me most is the actual genuine curiosity and interest these huge Silicon Valley companies showed. The professional network culture is not just about giving friendly pushes or pats on the back. It’s a real business MO, with its own codes and rules, with ROI as the main objective. Other than excellent business perspective, can you tell us what you remember from the French Tech Tour, at a more personal level? Learning how to nail pre-selling in 4 minutes… it’s huge. I almost made a deal yesterday, at the restaurant, without slides or anything to actually show. We’re not wired like the Americans, and we have a lot to learn from them. From a tech point of view, the French are a force to be reckoned with. When we catch up to the Americans in terms of marketing and business approach, we can send the US a takeover bid. Any advice for companies wishing to attend this summit next year? It’s all very relative and it depends on everyone’s “alphabetization level” so to speak. As far as I’m concerned, I know the financial and legal specificities of this country very well. What interested me most was their business approach. For others, it was investors, or the way they work intellectually… My advice would be to “get ready” before going, even though you might think you’re a hot shot back home. To conclude, I have read that many French Tech Tour attendees think that, in order to make it on the American market, you have to be physically implanted in the Silicon Valley, and outsource or create subsidiaries in other countries. Do you agree? It is required. The presence of a local (or industrial) investor in your capital is a competitive advantage you’d do well to consider (granted, we’re not in China yet, with their partnership exigencies, but it’s comparable)… It’s not crazy to dream of the US Government giving us a call, Cameron-style! Thank you Olivier for taking the time to answer our questions. This seminar was a truly great opportunity, and only time will tell, but it seems safe to assume that great things will happen in the future for ROK! Thank you for reading and tune in soon for more!

ROK Solution, the first multilingual Collaborative Intelligence platform (10 languages)

ROK adds new languages to its multilingual version! As of today, users can collaborate and share in ten different languages. After receiving acclaim from all over the world, ROK solution chose to add new languages to its multilingual Collaborative Intelligence Platform. Now, ROK users will be able to collaborate and share knowledge in ten languages: French, English, German, Italian, Spanish, Portuguese, Dutch, Russian, Chinese and Japanese. ROK can now be used in more than 140 countries and covers all continents. The addition of these new languages can benefit from ROK Solution’s platform as well, allowing to localize ROK Solution quickly if needed. ROK’s unique approach to language management allows to differentiate processes and knowledge by localizing them, making it possible for users to: Translate content integrated in ROK Solution Switch between languages easily within ROK. Local specificities can then be respected, as part of global knowledge sharing and collaboration. This new stage of development for ROK Solution shows how the platform can support international clients wishing to develop multilingual, cross-cultural and localized collaborative processes. “The services our solution provides are universal. This universality needs to be at the heart of our user interface as well. This multi-language version strengthens ROK’s international and mobile aspects, allowing it to be deployed on the Cloud, providing managers everywhere with a user-friendly touch interface”, concludes Olivier Bourrouilh-Parège, ROK Solution CEO.

ROK Solution, a valuable tool for strategy and international expansion

ROK Solution helps drive growth and profit for companies who wish to boost their development and reach new international markets. According to a study on the international presence of French actors, carried out by INSEE, the French national statistics office: “There are about 2500 French groups in charge of 31 000 subsidiaries outside of France, counting 4.7 million employees internationally, and 4.2 million in France.” Establishing an organization that manages to share good practices with several subsidiaries and collaborate on global matters is becoming an important challenge for these companies. ROK Solution helps drive growth and profit for companies who wish to boost their development and reach new international markets. The service ROK Solution provides is tailored for companies who wish to expand internationally. Thanks to ROK Solution: Deploy our solution in less than an hour to all your subsidiaries in France and abroad: ROK Solution is available in the Cloud, and marketed as SaaS (Software as a Service). Collaborate in multiple languages on your transversal processes: ROK allows instant collaboration and knowledge sharing on common topics, in multiple languages. ROK includes extended localization features, covering more than 120 world regions. Manage your collaborators access rights automatically: All the involved collaborators (on-site or in another subsidiary) in your projects are integrated simply and dynamically, and benefit from a clear view of the collaborative tasks each member needs to perform. Measure and monitor your subsidiaries’ performances in real time: ROK Solution provides managers with a monitoring dashboard that allows them to see “who does what, where, how and when”. A series of key numbers and indicators helps to instantly identify elements that may need improvement. No need for change management: ROK Solution is easy to implement, learn and use, thanks to its user-friendly interface. Updates are automatic and deployed in real time. ROK Solution helps companies wishing to carry out international expansion strategies and improves their subsidiaries’ performance to increase their responsiveness towards competitors. With their innovative solution, which integrates and harnesses the latest technology in an intuitive interface, ROK Solution significantly improves company responsiveness on markets where competitive pressure is always increasing. Improve your transversal flow productivity by up to 80% with ROK Solution!

ROK Solution raises 1.5 Million Euros

ROK Solution manage to entice new investors and finish their fundraiser with 1.5 Million Euros. Thanks to support from both newer and older investors, ROK Solution aim to boost their growth and deepen their competitive edge, by entering the American market. Collaborative Intelligence aims to allow company collaborators to pool together their know-how, in order to carry out projects or optimize their daily workflow. Such a system relies on combining, structuring, organizing and sharing heterogeneous information and expertise. The ROK platform was designed with this requirement in mind, without having to use multiple tools. Built for policy and decision makers, the platform puts end users back at the center of their own approach and allows to capitalize on non-physical company assets to increase performance and flexibility. ROK is the first all-in-one solution on the market to integrate BPA, BPM, CRM and BAM on a unified 2.0 communication platform. Olivier Bourrouilh, CEO and creator of ROK Solution: “We are proud to announce this new fundraiser, which will help us strengthen our references before we enter the American market. Our unique technology has reached maturity and has received many awards and praise. The entire ROK Solution team is mobilized to carry out our new development plan. Our solution is the only one on the market that can truly act as a performance enhancer.” ROK Solution is determined to keep a leading position on this thriving market. Read article Read article Read article Read article Read article Read article Read article

Category: International

DORA: How ROK Solution simplifies your compliance before the January 2025 deadline

ROK Solution selected in the RED HERRING Europe Top 100

ROK Solution slated for French Tech Tour ’12.

Back from the French Tech Tour, the CEO speaks up

ROK Solution, the first multilingual Collaborative Intelligence platform (10 languages)

ROK Solution, a valuable tool for strategy and international expansion

ROK Solution raises 1.5 Million Euros