As financial institutions move beyond initial Digital Operational Resilience Act (DORA) compliance deadlines, regulatory expectations are shifting from documented readiness to demonstrable, repeatable operational resilience. By 2026, supervisors across Europe are expected to place greater scrutiny on how firms test critical services, manage ICT and third-party dependencies, and produce consistent, auditable evidence that resilience is embedded into day-to-day operations rather than maintained as a static compliance exercise.
This on-demand session with Michael Rasmussen, an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC), and CLDigital’s customer success expert, Joleen Engela, explores what this shift means in practice. Together, they examine where organizations continue to face challenges, including fragmented risk data, manual reporting, and weak linkages between business services, ICT, and third parties, and outlines how automation, AI, and integrated GRC software solutions are helping firms strengthen testing, streamline evidence, and move toward continuous resilience at scale.