The European Union’s Digital Operational Resilience Act requires financial entities to focus on third-party risk, resilience, and testing.

Source: https://www.darkreading.com/cyber-risk/preparing-for-dora-amidst-technical-controls-ambiguity