Regulatory Alerts2025-05-28
Circular CSSF 25/893 on reporting of major ICT-related incidents and significant cyber threats under DORA
The CSSF issued Circular 25/893 to establish reporting requirements for major ICT-related incidents and significant cyber threats under the Digital Operational Resilience Act. This circular repeals the previous Circular CSSF 21/787, which applied EBA Guidelines on major incident reporting under PSD2. The new regulation updates the framework for financial entities to ensure consistent and timely disclosure of critical cyber risks and incidents.
Share