[Reading time: 12 seconds]

Over the weekend, I stopped off at a motorway services for (a healthy lunch) some fried chicken.

Looking around, I noticed something unusual: Among the 100+ people in the food hall, 1 person was wearing a face mask.

It struck me that about 2 years ago, encountering 1 person not wearing a face mask in this food hall would have been unusual.

So what has this got to do with cyber security?

In 2025 (or even sooner), I think it will be just as unusual to encounter someone working with the financial services industry who has not heard of the EU’s DORA regulation.