Resilience is now a regulatory fact of life for financial services

In November 2025, European regulators mandated that financial services firms must implement robust operational resilience frameworks, marking a significant shift in regulatory expectations. This move aims to ensure that firms can withstand and quickly recover from disruptive events, such as cyber-attacks or natural disasters. The decision underscores the growing recognition of resilience as a critical component of financial stability and reflects the industry's need to adapt to an increasingly unpredictable global environment. This regulatory change could lead to substantial operational overhauls and increased compliance costs for firms, but it ultimately aims to safeguard the financial system's integrity.