The 1st DORA incident report reveals the urgent need for financial institutions to enhance ICT resilience beyond compliance and focus on incident response.