Regulatory Alerts2025-05-28
CSSF Circular 25/892: Application of Joint ESA Guidelines on ICT-Related Incident Costs under DORA
The CSSF issued Circular 25/892 to implement the Joint ESA Guidelines on estimating aggregated annual costs and losses from major ICT-related incidents under Regulation (EU) 2022/2554. This directive requires financial entities to apply specific methodologies for calculating financial impacts associated with significant ICT disruptions. The circular ensures consistent application of the DORA framework regarding the quantification of ICT-related costs and losses across the sector.
Share