Case Study: AWS DORA Compliance Recommendations, FSI sector
In the first commercial use of the new AWS D-CAT capability globally, Bexprt delivers DORA compliance recommendations and insights to a multi-billion dollar global Financial Services business.
Executive summary
A multi billion-dollar global FSI organisation selected Bexprt to complete an AWS DORA Compliance Recommendation (D-CAT).
The client used Bexprt’s D-CAT recommendation service, which delivers directional guidance to help navigate complex DORA requirements through a structured assessment process. The detailed report, and follow up workshop with the client’s team, provided actionable recommendations related to their DORA posture, and delivered insights based on AWS services and best practices.
About the client
A global multi-billion dollar business in the Financial Services & Insurance (FSI) sector.
The challenge & cloud opportunity
The client has a sophisticated AWS environment, including comprehensive disaster recovery and resilience capability. They operate in a complex global web of regulatory requirements, and the business needed to assess and understand their DORA compliance, identify potential issues and priorities remedies.
About DORA…
The Digital Operational Resilience Act (DORA) is a regulation introduced by the European Union to strengthen the digital resilience of financial entities. It entered into application on 17 Jan 2025 and ensures that banks, insurance companies, investment firms and other financial entities can withstand, respond to, and recover from ICT disruptions, such as cyberattacks or system failures.
DORA brings harmonisation to rules relating to operational resilience for the financial sector, applicable to 20 different types of financial entities and ICT third-party service providers.
Discover more.
The solution & services used
- Bexprt workshops: In a pre-planning meeting, Bexprt explains to the customer the assessment structure, required roles and expected outcome. Then two workshops are held: one to run the assessment, and the second to present and discuss the findings and next steps.
- AWS DORA Compliance Recommendation Tool (D-CAT), and follow-up services from Bexprt.
The results & benefits
- Bexprt’s D-CAT recommendation service delivered directional guidance to help navigate complex DORA requirements through a structured assessment process.
- The D-CAT tool delivers informational value through gap analysis and recommendation options based on AWS best practices, helping organizations develop informed strategies for their compliance journey.
- A full report with prioritised recommendations, business benefits, effort estimate and specific actions.
- A roadmap of recommendations for improvements: specific, detailed and focused on areas that will deliver the biggest impact.
- After remediation of risks, an improved AWS environment which more closely aligns with the DORA requirements.
- Staff knowledge: we help your team to establish and enhance DORA compliance habits, and reduce risks.
Below: graphical extracts from an example D-CAT report. The full report contains prioritized recommendations, business benefits, effort estimate and specific actions.
How can Bexprt help you?
Resilience, a Bexprt Superpower.
The AWS DORA Compliance Recommendation Tool is just one part of Bexprt’s AWS Resilience capabilities.
- Resilience in the cloud
- The AWS DORA Compliance Recommendation Tool, D-CAT
- DORA Compliance with AWS: 7 action points to consider
- No DR or Resiliency strategy yet? The Bexprt Team can help you with that too. Our Resilience Practice covers Landing Zone, Migration, DR, Well-Architected Framework reviews, Optimization, AI-based automation, DORA Compliance Recommendations (AWS D-CAT) and more. hello@bexprt.com
