For decades, network resilience was a matter of best practice, guidance that operators were encouraged but not compelled to follow. That era is over. In the space of fourteen months, three landmark regulations turned resilience into a legal obligation, and for telecommunications they reinforce parts of the same agenda rather than standing as three separate rulebooks.