Ability of a financial entity to withstand, respond to, and recover from disruptive ICT events according to the Digital Operational Resilience Act. Includes ICT risk management, incident reporting, resilience testing, ICT third-party risk management, and cyber threat information sharing mechanisms.