The ESAs’ first report under DORA confirms that supervisors view incident volumes as a sign of reporting maturity, not systemic weakness—the focus is on whether firms can demonstrate effective ...