2024-07-17
The European Supervisory Authorities issued these guidelines to harmonize how financial entities estimate aggregated annual costs and losses from major ICT-related incidents under DORA. Financial entities must report gross costs and losses alongside financial recoveries, utilizing a standardized template and selecting either the calendar or accounting year as their reference period. The requirements apply from May 2025 and aim to ensure data comparability while reducing reporting burdens by excluding net cost calculations.