Operational resilience under NIS2 and DORA Operational GRCRegulatory Governance Operational resilience under NIS2 and DORA