Digital Operational Resilience Act. EU binding ICT risk-management framework for the financial sector. Directly applicable, no transposition. Fully applicable since 17 January 2025, no grace period. Lex specialis to NIS2 for financial entities.