- Start from the whole textMettle works from DORA together with its technical standards and the Q&As of the EU supervisors (ESAs). The rules on logging, for one, are in Delegated Regulation (EU) 2024/1774, not in DORA itself.MetLex study, October 2026
- Obligations traced to the workMettle traces obligations to the governing document that meets them and the work item that proves it. At a Swedish financial firm Joakim also brought the product and technology organisation into the ICT governing documents, with a daily cross-team stand-up.A Swedish financial firm, 2026
- Compliance inside the workflowAt Nord Fondkommission Joakim set up sign-off by UX, compliance and the business in native Jira workflows, so the approvals are recorded with the work. There Joakim also set up policies for MiFID II, GDPR and ISO 27001.Nord Fondkommission, 2020–2021
Where Joakim has done it
- Took the first draft of the function register to approval by the head of product and technology and the IT security lead.A Swedish financial firm, 2026
- Ran the business impact analysis, with a full-day workshop, and drew up the maximum downtime, recovery time and acceptable data loss for processes, functions and systems.A Swedish financial firm, 2026
- Built a delivery schedule from the dependencies and a capacity model, and put the resource need to the steering group for decision.A Swedish financial firm, 2026
- Set up product management and MiFID II, GDPR and ISO 27001 policies.Nord Fondkommission, 2020–2021