EU Regulation 2022/2554 (DORA) imposing binding digital operational resilience requirements for the financial sector. Covers ICT risk management, incident reporting, resilience testing, third-party ICT risk management, and supervision mechanisms for banks, insurance companies, financial intermediaries, and critical ICT service providers.