From one-off diagnosis to living framework: a paradigm shift on DORA

Almost every financial entity has, at some point, carried out a DORA diagnosis. A firm came in, assessed maturity, produced a gap matrix, recommended an action plan. It was necessary. But it was also a snapshot — a sharp image of the situation at a point in time. Yet DORA does not ask for a snapshot. It asks for a film. And this is where most frameworks crack.

The diagnosis: useful, but perishable

A diagnosis has immense value at the start: it reveals where you stand, what is missing, where to begin. The problem is not the diagnosis itself, but its shelf life. From the day after delivery, it begins to date:

• A new provider is signed → the register is no longer up to date.
• A contract is renewed → the assessed clauses are no longer the right ones.
• An incident occurs → it appears nowhere in the snapshot.
• A function changes criticality → the mapping drifts.
• Governance takes decisions → they are linked to nothing.

Six months after a « compliant » diagnosis, reality has moved, but the document is frozen. The entity has the illusion of compliance while looking at an image of the past.

What 2026 supervision changes in the equation

As long as the supervisor was providing support, a recent diagnosis could suffice to show good faith. With the shift to active supervision and a « show me » logic, the situation changes. The regulator no longer asks where you stood at the time of the diagnosis, but where you stand now, and it expects consistent, up-to-date evidence. A frozen framework does not withstand this real-time requirement.

The difference between a diagnosis and a living framework

	One-off diagnosis	Living framework
Nature	A snapshot at a point in time	A continuously up-to-date state
Update	Manual, periodic, costly	Integrated as you go
Evidence	Rebuilt at each request	Tied to requirements continuously
Facing control	« Here is where we stood »	« Here is where we stand, with the evidence »
Economics	Regular renewal of engagements	Reduced, compounding maintenance burden

A living framework is not a diagnosis « done better ». It is a change of nature: you move from a deliverable to a system.

What « living » means concretely

A living framework rests on three properties:

1. Linked data. Contracts, third parties, assets, policies, risks and incidents share a common foundation. An update in one place propagates everywhere, without double entry or inconsistency.

2. Evidence attached to requirements. Each DORA obligation points to the evidence that attests to it. Demonstrating compliance becomes an extraction, not an internal investigation.

3. Updating integrated into daily operations. Maintenance is no longer a project relaunched each year, but a routine integrated into operations: every new provider, every incident, every decision feeds the framework at the moment it happens.

The role of AI in this shift

This is where artificial intelligence finds its real usefulness — not as a marketing argument, but as a concrete lever. Analysing a contract clause by clause, structuring an incident, tying evidence to the right requirement, detecting an inconsistency: all repetitive, time-consuming tasks that AI accelerates, provided it is plugged into a linked, controlled data foundation, in a governed environment. AI does not replace compliance judgement; it frees up time by absorbing routine upkeep.

The real benefit: sleeping soundly

At heart, the stake of moving to a living framework is simple. With a one-off diagnosis, every supervisor request, every committee, every incident triggers an emergency mobilisation. With a living framework, the answer is already there. This is not only more efficient: it is a different way of exercising responsibility, serene rather than reactive.

Where Axenia fits in. Axenia is designed precisely to operate this shift: from a frozen diagnosis to a linked, maintained and continuously demonstrable framework. You no longer start from scratch at each deadline — you compound.

---

This article offers analysis and does not constitute legal advice. Compliance trade-offs are for your organisation to make.

See how Axenia makes your DORA framework living. Book a demo →