Mettle

Regulation and compliance

The function register: first draft taken to approval

A Swedish financial firm (Mindstreet team), 2026

The situation

In its authorisation programme, a Swedish financial firm needed its function register, impact analysis and system classification. Joakim joined as ICT project manager, as part of the Mindstreet team.

What Joakim did

  • Set the rules for a function register in the format of the DORA register of information.
  • Traced obligations to a governing document and a work item.
  • Ran the business impact analysis, including a full-day workshop, and drew up the maximum downtime, recovery time and acceptable data loss for processes, functions and systems.
  • Built a delivery schedule from the dependencies and a capacity model, and put the resulting resource need to the steering group for decision.

What came of it

Joakim took the first draft of the register to approval by the head of product and technology and the IT security lead, and gave the systems a first classification by criticality.

Packages