Business
Is the financial sector ready for DORA?
Source: Finance Derivative
Wayne Scott, Regulatory Compliance Solutions Lead at leading software escrow company, Escode, delves into the Digital Operational Resilience Act (DORA), exploring the key challenges financial organisations are facing and what they can do to prepare themselves for the upcoming legislation.
With just three months to go until the enforcement of the Digital Operational Resilience Act (DORA), the clock is ticking for those financial services organisations operating in the European Union. Businesses that do not comply could face serious consequences, including fines of up to 2% of global daily revenue and potential personal liabilities such as fines or jail time for executives, so thorough preparation is crucial.
So how ready are organisations for DORA, and what challenges might be facing them on the road to compliance?
DORA: A new era in financial regulation
DORA isn’t just regulation; it’s legislation. This distinction underscores the European Union’s intent to enforce it with absolute rigour, addressing growing concerns around third-party risk. DORA advocates for the inclusion of stressed exit plans in all ICT third party license agreements to prevent supplier failure majorly disrupting the financial service sector.
As financial institutions increasingly rely on external tech providers, the threat of a single point of failure has never been more pertinent. Recent high-profile global tech collapses have shown just how vulnerable the system is, making DORA’s focus on digital resilience timelier than ever.
The financial landscape is already turbulent, made fragile by ongoing issues such as rising global borrowing costs. So, the last thing financial services need is more risk exposure from poorly managed third-party relationships.
How does the regulation stack up across the globe?
While DORA is the EU’s latest regulation, it’s not just European companies that need to pay attention. Interest in DORA is rapidly growing in the US and UK, particularly among companies with significant EU operations. Yet, many non-EU firms are still unsure whether they’ll fall under DORA’s rules.
Adding to the pressure is the looming deadline for the UK’s SS221 regulations, coming in March 2025. The overlap between DORA and SS221 has left many organisations frustrated, facing compliance with not one but two significant regulatory frameworks.
Globally, DORA represents a new chapter in digital resilience. While the EU is leading the charge, the rest of the globe is following very closely behind.
Despite the growing urgency for robust third-party risk management, many organisations remain alarmingly underprepared for DORA’s implementation. In fact, a recent report commissioned by Escode in collaboration with international research organisation CeFPro, revealed that only 20.8% of financial professionals report having stressed exit plans in place within most of their third-party agreements, including software suppliers.
These figures indicate that many financial institutions still have considerable work to do in preparation for DORA. With the new legislation set to take effect from January 2025, it’s important to look at the challenges facing businesses when it comes to ensuring compliance.
The risk of overconfidence
A common pitfall for large institutions is assuming they are DORA-ready. Many discover major gaps when they conduct deeper assessments, particularly in areas like third-party escrow agreements, which can take months to finalise. This becomes even more risky when organisations lack clarity on the penalties for non-compliance.
So, in the lead up to DORA, organisations need to build a defensible position. While complete compliance by January 2025 may be a long shot for many, organisations can start to demonstrate progress. A clear roadmap, identifying regulatory gaps and planned actions for improving processes, could make all the difference in helping the financial sector to prepare for the changes.
Navigating ambiguity
There’s currently a lack of clarity around whether critical third-party providers will be directly regulated under DORA. Many tech companies, who are often blindsided by regulatory updates in the financial sector, are also ill-prepared for the many compliance requests about to come their way.
The cost of compliance is another challenge. As reactive compliance kicks in, companies are discovering that ticking all the regulatory boxes isn’t just time-consuming—it’s expensive. Many are scrambling to implement reactive solutions, which only add layers of complexity.
What’s really needed is standardisation – a clear path that helps third-party tech providers understand and meet regulatory expectations. Until that happens, confusion will remain a barrier for both financial businesses and tech providers alike.
What should organisations do now?
With only months left until DORA comes into play, its clear organisations need to act now to ensure a smooth transition.
Here are key steps organisations can take to make the process of becoming DORA-ready as easy as possible:
- Mobilise cross-functional teams
Effective digital resilience requires collaboration, but in many cases, accountability is lacking. Some companies have assigned DORA compliance to legal departments, others to risk or IT teams. This often results in a fragmented approach to a problem that requires unity. Organisations need to mobilise cross-functional teams to tackle the challenge head-on and ensure a collaborative approach to risk management.
- Focus on supplier management
Equally important is supplier management. It’s not just about ensuring your direct tech providers are resilient—what about their providers? A key question every organisation should be asking its suppliers is: “What’s your stressed exit plan?” Proactive due diligence is critical, but it’s not happening fast enough. The message for C-suites is clear—get your teams together, assess the financial, contractual, and technical barriers, and act before it’s too late.
- Conduct gap analysis
Regular gap analysis will be a crucial tool in this process. Continual assessment of your current compliance status will not only identify areas that need attention but will also help shape the defensible position that could save you from regulatory pressures. This is key for taking a proactive approach to managing risks and regulation and can help to avoid challenges in the long run.
The countdown is on
Three months may feel like a lifetime in the corporate world, but when it comes to DORA compliance, it’s the blink of an eye. The message for financial services is simple: if you’re not already well on your way to compliance, you’re behind.
Now is the time to mobilise your teams, collaborate across departments, and prepare for the legislation. For the financial sector, DORA marks the beginning of a new regulatory era—one where digital resilience isn’t just a buzzword, but a non-negotiable imperative. The time to act is now.
You may like
Business
Overcoming intricacies of premium processing in the insurance industry
Source: Finance Derivative
By Piers Williams, Global Insurance Manager at AutoRek
Complexity is an unavoidable reality for the intricate world of insurance. For program administrators, including brokers, managing general agents (MGAs) and managing general underwriters (MGUs), accurate management of insurance premium payments and complex workflows like bulk payments and diverse data sources is essential – there cannot be room for error. Unfortunately, poorly executed and complex processes can lead to costly mistakes. This is especially true for essential financial control processes that directly impact the performance of insurance businesses such as premium payment processes – also commonly known in corporate industries as account receivable and payable processes.
In particular, the traditional, manual management of insurance premium payments is what can often lead to unresolved outstanding debt and large balances of unallocated cash. When you combine this with the 30% growth in delegated/program businesses (over 30%+ in the last 3 years), using Excel sheets and the ever-increasing policy volumes, the approach becomes unsustainable and inefficient.
This article will outline the transformative benefits automation offers and the key actionable strategies that will enable program administrators to optimise the management of insurance premium payments for greater efficiency and effectiveness in their financial operations.
Embracing automation: the future of insurance
The future of insurance lies in automation – this is where premium payment processing comes in. Automation enables businesses not to erode margins through write-offs but accelerate cash flow and protect revenue. The primary goal is to accelerate premium reconciliation and allocation by implementing an automated straight-through process, minimising the need for human intervention to ensure that minutes – not hours – are spent on the reconciliation process.
By leveraging automated systems and advanced data integration, premium payment processing has the potential to offer a more streamlined, accurate and effective insurance ecosystem. Automation minimises the likelihood of human error and delays in transaction times; ensuring that precision is at the forefront of the financial processes. This shift towards automation addresses one of the key challenges faced by the insurance industry – eliminating inefficiencies which can lead to costly mistakes and unnecessary delays.
Producing scalability in a competitive market
Program administrators are confronted with a multitude of pain points in their day-to-day operations. Given that program administrators handle a significant amount of insurance policies across multiple binders/programs in the market, considerable admin effort is required to process a vast number of internal and external data sources as well as payments and policy data. As a result, program administrators risk losing valuable time and resources – giving them less time for value-added tasks, like resolving breaks, addressing downstream issues, and creating better partnerships with insurance partners.
The impact of such operational inefficiencies can impact not only accounts receivable, collections and credit control processes but also business profitability, binder/program performance, competitiveness and reputation to name a few. Without the adoption of more advanced technologies like automation, program administrators are increasingly at threat of not being able to produce scalability in a competitive market.
Whilst automation offers huge efficiency upside for businesses there are also many benefits delivered by simply having a single premium data control platform. One of the most notable challenges with premium payment operations is the often-large numbers of internal and external data sources that must be managed and processed. This data needs to be continuously processed to ensure reporting is up to date and management has a comprehensive view of outstanding premiums, allocated premium and cash positions at any point in time. The management of this data, if not performed within a platform, presents a huge risk from a control perspective, as often premium payments will not be allocated for 30, 60 or 90 days, therefore needing a solution to keep track of all data automatically to ensure efficiency and control to ensure.
Identifying and addressing inefficient processes
Investing in modern technology like automation is often the first step in streamlining operations and eliminating inefficient processes. The goal is to encourage program administrators to focus less on manual administrative tasks that are time-consuming and instead, focus on key business decision making to improve financial gain – automating manual processes does exactly that.
Likewise, the insurance industry is constantly evolving so the adoption of premium payment processing will be crucial in remaining competitive in a shifting market dynamic. With this in mind, legacy systems, once the backbone of insurance operations, must go. These systems are outdated and unable to meet the demands of a data-driven, regulated market, leading businesses to embrace digital transformation and no longer depend on inefficient processes.
Business
Who’s Scared of Embedded Payments?
Source: Finance Derivative
Johannes Kolbeinsson, CEO at PAYSTRAX
Embedded payments have been swiftly integrated into the e-commerce ecosystem, showcasing their transformative potential in reshaping how we make transactions. There is a bright future for embedded payments, but we must emphasise the significant untapped potential within the space as it currently stands, as the user experience still isn’t quite seamless, and third-party payment processors still present a fraud risk to companies.
A Rapidly Expanding Market
The growth of embedded payments is undeniable. Driven by the rise of digital wallets and one-click checkout systems, the global market for embedded finance as a whole is projected to grow from $92 billion to $228 billion between 2024 and 2028. Recent shifts in consumer behaviour, especially toward frictionless digital experiences, have been accelerating the adoption of these solutions across sectors. Embedded payments offer that seamless one system approach, not only quickly processing payments on app, but building a one app relationship with consumers that develops brand loyalty.
This trend directly mirrors the business strategies of the major players in the tech world. Companies such as Apple, with its mobile wallet and credit card ventures, and Shopify, combining e-commerce with embedded payments, have demonstrated that blending payments directly into platforms can drive user engagement and boost conversions. The logic is plain and simple: by keeping consumers within the app, businesses streamline the purchasing process, increasing the likelihood of finalising transactions, and building brand and customer loyalty.
The Embedded Payments Boom
Embedded payments have become the latest hot topic in fintech. In fact, just a few years ago, in 2020, embedded finance payments were generating around $16 billion in revenue. Looking ahead to next year, forecasts suggest that number will skyrocket to over $140 billion. The success of platforms like Uber with one-click payments and the buy-now-pay-later (BNPL) models from companies like Klarna are clear indicators of this shift. Consumers increasingly seek ease and convenience, and embedded payments are meeting those demands head-on.
However, for all the excitement, embedded payments still face challenges in adoption. Fraud prevention, authentication, and user experience remain key barriers that need to be addressed on an industry wide level to truly deliver the seamless, instant payments these systems promise consumers.
Addressing the Friction
While the promise of embedded payments is enticing, friction remains. One of the most critical challenges for businesses adopting embedded payments is ensuring robust risk management. Creating an online experience that feels as secure as an in-store transaction should be a top priority, especially as financial fraud becomes more prevalent.
Currently, many companies are jumping into embedded payments without fully understanding the complexities involved. The lack of in-house expertise in building the necessary infrastructure across digital services, transaction processing, and enablement layers can lead to implementation issues and security vulnerabilities. Businesses need to conduct proper due diligence to avoid potential pitfalls, as hasty implementations can compromise both functionality and security.
User experience is another key factor in determining the success of embedded payments. Historically, we’ve seen how PayPal revolutionised online payments with its email-and-password system, setting a new standard. Embedded payments, while advanced, are still evolving to achieve a truly frictionless experience. Authentication processes frequently occur outside of the platform or app, and the range of payment options can be limited. To fully realise the potential of embedded payments, businesses must balance security, usability, and convenience.
Trust and Security Concerns
Security and trust are paramount when it comes to anything finance related, and these are areas where embedded payments must improve to gain widespread consumer adoption. With growing concerns about data privacy and the rise in online fraud (40% of all reported crime in the UK last year were fraud), it’s clear that consumers need reassurance before embracing embedded payments.
While embedded payment systems offer unparalleled convenience, their inherent vulnerabilities could make them a prime target for cybercriminals. The lack of standardisation and regulation in the sector, coupled with a general shortage of expertise that comes with a new industry, poses significant risks for users. Nevertheless, history suggests that consumers are willing to trust new technologies over time. Just a decade ago, saving card details online was met with hesitation; today, it’s commonplace. Similarly, as security concerns are addressed, embedded payments will likely gain traction as consumer trust grows.
The Path Ahead for Embedded Payments
Despite the array of payment methods available today, the potential for embedded payments to dominate the future of finance is undeniable. Their speed, ease, and ability to facilitate in-app purchases with a simple click make them an attractive option for both consumers and businesses.
Yet, for embedded payments to live up to their promise, key challenges remain. User experience and authentication are the primary obstacles. Truly embedded payments should enable users to complete transactions within the app, without being redirected elsewhere for authentication. As instant payments become the norm, any requirement to leave an app to verify a purchase could deter adoption. Addressing these issues will be critical to the future success of embedded payments as they continue to evolve and reshape the digital landscape.
In the coming years, as innovations like AI-driven fraud detection and biometric authentication become more integrated, the potential for embedded payments to achieve a truly seamless experience will grow. This could be the defining shift that cements embedded payments as the default mode of financial transactions in our increasingly digital world.
Business
The need for speed: Why fintechs must supercharge background checks to stay competitive
Source: Finance Derivative
By Luke Shipley, Chief Executive Officer and co-founder at Zinc
In the fast-paced world of finance, and particularly where finance and technology intersect, hiring candidates with the right skills is crucial for staying ahead of the competition. For fintech firms, conducting fast yet thorough background checks is key to balancing regulatory compliance with the need for speed.
However, financial regulations in the UK demand rigorous oversight to safeguard consumer data, prevent fraud, and maintain financial stability. As part of these regulations, fintech companies must conduct thorough background checks to ensure new hires align with compliance standards, mitigating risks to both the company and its customers. These checks involve verifying critical information such as financial history, credit reports, criminal records and employment history, which are essential for determining the suitability of candidates handling sensitive financial data. These checks are both time-consuming and resource-intensive, slowing down the hiring process.
Fintech firms can sustain rapid growth and meet regulatory obligations without sacrificing operational efficiency by streamlining this crucial part of the hiring process with the right tools. This also enables HR teams to focus on creating a positive experience for new hires, rather than burdening them with additional administrative tasks. Implementing efficient systems that reduce these checks from weeks to days allows companies to swiftly onboard talent, maintain customer trust, and stay competitive.
Challenges of traditional background checks
Traditional background checks in the fintech industry are complex and time-consuming due to the stringent regulatory requirements that financial organisations must follow. Verifying candidates’ financial history, running credit reports, conducting Disclosure and Barring Service (DBS) checks, and confirming employment history for the past several years are all critical tasks. These checks are not only meticulous but also require coordination with external agencies, which often slows down the process.
Manual handling of these background checks can extend the hiring timeline by weeks or even months, creating operational inefficiencies for fintech companies that need to scale quickly in a competitive industry. Prolonged hiring cycles can also lead to delays in onboarding vital talent, putting added pressure on already stretched teams.
For HR departments, managing these extensive checks manually places a heavy administrative burden. The time spent gathering documentation, verifying information, and coordinating with third parties diverts HR professionals from focusing on more strategic initiatives, such as talent acquisition and improving the candidate experience. As a result, the manual process not only hinders recruitment efficiency but also affects the company’s ability to attract top talent in a timely manner.
Role of technology in streamlining background checks
Here, technology plays a crucial role as it revolutionises the background check process in fintech by reducing manual interventions and simplifying time-consuming tasks. Automated platform systems now handle complex steps like identity verification, credit checks, and employment history validations far more efficiently than traditional methods. These technologies not only speed up the process but also provide one centralised place for employee documentation and improve accuracy by reducing the risk of human error in verifying critical information.
Automation also allows fintech companies to complete thorough background checks in a fraction of the time, continuing to ensure global compliance without delaying the hiring process. HR teams are freed from the burden of manual data gathering by automating repetitive tasks and reminder emails so they can focus on higher-value activities, such as candidate engagement and talent strategy.
Moreover, integrating background check platforms with existing HR systems streamlines recruitment workflows. This integration ensures a seamless transfer of data, and provides real-time updates on the status of each candidate’s background check. The result is a faster, more efficient hiring process that allows fintech firms to onboard new employees quickly, creating a positive reflection of their brand at every stage of the onboarding process.
Improved candidate experience
Technology in recruitment not only benefits HR teams but also significantly enhances the candidate experience. Automated systems cut down lengthy waiting periods, helping candidates move through the hiring process more swiftly.
From digital applications to real-time status updates, candidates enjoy a seamless, transparent process, which minimises stress and uncertainty. This streamlined approach improves communication and ensures that candidates are informed at every stage of their check progress, fostering trust and keeping them engaged. Additionally, modern tools like AI-driven assessments or automated interview scheduling save time, allowing candidates to focus on showcasing their skills rather than dealing with logistical hassles. Fintech companies can improve their overall employer branding by providing a more efficient and organised hiring process, attracting top talent who appreciate a modern and tech-forward experience.
It is why speeding up background checks is crucial for fintech companies aiming to stay competitive. By leveraging modern technology, these companies can benefit from greater efficiency, regulatory adherence, and an enhanced candidate experience. Fintech firms should embrace tech-driven solutions to balance speed and regulatory requirements, ensuring a smooth, transparent, and efficient hiring process.