Now in force, DORA has proved challenging for many IT leaders to achieve compliance, particularly around third-party providers, suppliers, and subcontractors.