DORA Is Live: What UK Financial Services Firms Got Wrong in Year One

The Digital Operational Resilience Act has been enforceable for over a year. UK firms providing services to EU financial entities are still mid-scope, and the early enforcement actions tell us where audit teams are looking. Here are the five gaps we see consistently in firms that thought they were ready.