Every EU member state must make a compliant European Digital Identity Wallet available by 24 December 2026, and regulated companies must accept it twelve months later. This guide covers what organisations have to decide, build and register before those dates, written from the perspective of a team that has maintained national eID middleware since 2011.
DORA requires financial institutions to demonstrate operational resilience to supervisors, not simply to run tests. This article covers what QA teams at banks actually have to produce as evidence, which DORA articles govern it, and where most testing programmes fall short when a supervisory review arrives.
Two days. Dozens of conversations. One consistent theme: the distance between policy ambition and operational reality is still significant and the organisations closing that gap are the ones worth watching.
In 2026, the Cyber Resilience Act (CRA) is no longer a future deadline, it is the operational reality for every organization in the European market. With mandatory security requirements for products with digital elements, compliance has shifted from a “nice-to-have” to a fundamental license to operate.