The EU's Digital Operational Resilience Act (DORA) entered full enforcement in January 2025. It mandates comprehensive ICT risk management, extensive resilience testing (including threat-led penetration testing), strict third-party vendor oversight with contractual requirements, and 24-hour major incident reporting to regulators. DORA's significance extends beyond the EU: Singapore, Australia, and Canada are implementing aligned frameworks, establishing DORA-equivalent standards as the emerging global baseline for financial services operational resilience.