DORA vs. SS1/21 vs. US operational resilience — the regime atlas — ITOL

Four regimes compared where they actually differ — designation vocabulary, tolerance semantics, testing, third-party oversight — with every incident-notification clock cited to the regulator's own text.