DORA is EU law for ICT in finance. The supervisor wants named records, not a slide that says you are ready. The Digital Operational Resilience Act asks financial entities to know their ICT risk, their important business services, the parties those services depend on, and what happens when an incident starts a clock. That is operational work: registers, plans, incidents and evidence — held so the board and the supervisor can open the same week.