DORA One Year Later: Lessons from the First Wave of Financial Sector Enforcement

The Digital Operational Resilience Act has been in force since January 2025. Supervisory findings, ICT third-party register realities, and operational resilience testing outcomes are now visible. Here is what financial entities and their critical providers have learned.