illustrative example: business functions of a venture capital fund manager

defining business functions is a central requirement under the digital operational resilience act (dora) as part of building your ict risk management framework, you must identify the business functions your organization performs, determine their criticality, and map their dependencies this exercise is essential because functions are the anchor point for risk assessment, impact analysis, and reporting to give you a head start, we have prepared an illustrative example of how the business functions of a venture capital (vc) fund manager could be defined, based on the functional requirements of the alternative investment fund managers directive (aifmd) please note that this example is provided for illustration purposes only each organization must carefully define its own business functions according to its unique operating model, strategy, and regulatory perimeter i core aifmd functions portfolio management executing investment decisions in startups and growth companies, including sourcing, due diligence, structuring deals, monitoring portfolio performance, providing governance input, and planning exits risk management independently identifying, monitoring, and controlling risks such as startup failure, sector concentration, and liquidity exposure, setting limits, and performing stress tests to ensure compliance with fund mandates and aifmd requirements ii operational and administrative functions administration of the aif managing the operational backbone of the fund, including fund accounting, legal administration, record keeping, capital calls and distributions, investor registers, reporting, and audit coordination valuation establishing consistent and independent valuation procedures for illiquid equity holdings, performing periodic valuations, and ensuring independence from portfolio management or engaging an external valuer as required under aifmd depositary oversight ensuring safekeeping of fund assets through an appointed depositary that monitors cash flows, verifies ownership, and supervises subscriptions, redemptions, and distributions iii investor related functions marketing and fundraising promoting and offering fund units to professional investors, preparing fundraising materials, managing due diligence processes, and complying with aifmd marketing and passporting rules investor relations maintaining transparent communication with investors, providing regular updates and reports, hosting annual meetings, and managing inquiries and co investment opportunities iv governance, compliance, and oversight functions regulatory compliance ensuring adherence to aifmd and related obligations, including annex iv reporting, aml/kyc, gdpr compliance, conflict of interest management, and monitoring leverage and liquidity policies delegation oversight monitoring and controlling outsourced functions such as administration, valuation, or risk, conducting due diligence on providers, and ensuring the aifm retains responsibility and is not reduced to a “letter box entity ” organisational requirements and internal controls maintaining robust governance structures, adequate human and technical resources, secure systems, accounting and record keeping, and effective continuity and internal control measures closing note this example shows how business functions of a vc fund manager can be logically grouped and described under the aifmd framework in the dora context, such definitions provide the blueprint for ict risk management remember this list is illustrative only every organization must carefully define its own business functions, aligned to its specific activities, operating model, and regulatory obligations