Three European instruments, one operating picture: what you run, who you depend on, what broke, and the file you can open. DORA, NIS2 and the Critical Entities Resilience Directive (CER) were not written as one product. Finance, essential services and designated critical entities have different competent authorities and different clocks. They still ask for the same four facts: services that cannot wait, parties those services depend on, incidents with a timeline, and evidence you can freeze.