DORA (Digital Operational Resilience Act) is an EU regulation that sets ICT risk management, incident reporting, testing and training requirements for financial entities.