DORA and operational resilience: Credential management as a financial risk control

Article 9 of the EU's Digital Operational Resilience Act (DORA) mandates authentication and access control as legal obligations for financial entities. The article outlines DORA's requirements and illustrates the risks of breaches when these controls are absent.