DORA is reshaping how Europe’s financial sector thinks about compliance, and most firms still aren’t ready