How the EU’s Digital Operational Resilience Act (DORA) is reshaping ICT risk management, incident response and operational resilience across financial institutions.