Insurance Group Co. needed hundreds of ICT vendor contracts repapered against a fixed DORA deadline, and eight months with a prior legal services provider had produced zero completed contracts. Execo took full ownership of execution, remediating the entire portfolio with zero internal hires and a risk report on every contract.
Note: The client's name has been anonymized in this case study to protect their confidentiality.
Problem
Insurance Group Co. is a global insurance broking group, and like every financial entity in scope for DORA, it had a hard deadline. The EU's Digital Operational Resilience Act went live in January 2025, and it required financial entities to repaper their ICT vendor contracts with new provisions for monitoring, incident reporting, and operational resilience. For Insurance Group Co., that meant hundreds of contracts needing review, redlining, and renegotiation against a brand new standard, all against a fixed regulatory window.
Insurance Group Co. had previously engaged with a Big Four consultancy to do the work. Eight months later, not a single contract had been completed. The engagement was staffed largely with junior resources who applied the playbook mechanically, with little real legal judgment behind the calls being made. Drafts came back needing rework by the client's own legal team, which defeated the purpose of bringing in outside help in the first place. Leadership had no live view into where the portfolio stood, and unclear escalation paths meant that anything complicated simply stalled.
Insurance Group Co. didn't lack expertise. Its own team had already defined what a compliant contract needed to look like. What it lacked was a partner who could actually execute at the volume and pace the deadline demanded.
Solution
Execo was brought in to take full ownership of execution, replacing the Big Four team. The team embedded a dedicated group of DORA-trained lawyers to operate under the client's own contract playbook, supported by a purpose-built standard operating procedure with clear authority limits and escalation criteria set from day one.
Every in-scope contract moved through the same workflow. Execo used Leah, a DORA-configured AI platform, to extract clauses and flag gaps against the playbook, then generated draft redlines against pre-approved fallback positions. A qualified DORA-trained lawyer reviewed and signed off on every output before it moved forward, and Execo's own lawyers handled supplier negotiation directly, within limits the client had approved in advance.
Centralized dashboards gave the client's leadership a live view of every contract's stage, risk level, and negotiation progress. The client kept every risk decision, every playbook approval, and final sign-off on non-standard terms. Execo owned the execution end to end.
Results
Insurance Group Co.'s full portfolio of in-scope ICT contracts was reviewed, redlined, and negotiated against DORA requirements within the timeline the client set for the engagement. Specific results included:
- 100+ contracts remediated: The full in-scope portfolio was reviewed, redlined, and negotiated against DORA requirements.
- 100% risk-documented: Every contract received an individual risk report, creating a clear evidentiary trail for supervisory review and future audits.
- Zero internal hires: Execo's team absorbed the full peak workload. No temporary recruitment, no ramp-up cost, no onboarding delay for the client.
- Every milestone met, on time: Delivery was structured and milestone-tracked from day one, with the full portfolio completed within the agreed programme timeline.
Insurance Group Co. moved from a stalled compliance programme to a fully remediated, audit-ready contract portfolio, with the internal visibility and documentation to support supervisory review going forward.