2024-07-17

Joint Guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents

The European Supervisory Authorities issued these guidelines to harmonize how financial entities estimate aggregated annual costs and losses from major ICT-related incidents under DORA. Financial entities must report gross costs and losses alongside financial recoveries, utilizing a standardized template and selecting either the calendar or accounting year as their reference period. The requirements apply from May 2025 and aim to ensure data comparability while reducing reporting burdens by excluding net cost calculations.

European Securities and Markets Authority logo

European Union

European Securities and Markets Authority

Click to view full text