2024-07-17

Added 2026-09-25

Final Report on Draft RTS and ITS for Major Incident Reporting and Cyber Threat Notification under DORA

The European Supervisory Authorities have amended the draft Regulatory and Implementing Technical Standards to modify reporting timelines, weekend obligations, and template content for financial entities. The amendments extend the deadline for intermediate reports by up to 24 hours and final reports by at least 72 hours, calculated from the submission of the previous notification rather than the incident classification moment. Weekend reporting obligations are narrowed to exclude smaller entities and cross-border impacts, with submission deadlines extended to noon on the first working day. The reporting template is streamlined by reducing fields from 84 to 59, including a simplification of initial notification mandatory fields from 17 to 10.

European Union

European Banking Authority

Lineage: In forceGet EBA alertsTrack amendments

SourceRead with an agent

Tools

Share

EBA published 1 document in the last 30 days — get each new one by email the day it lands.

Get EBA alerts

JC 2024 33
17 July 2024
Final Report
Draft Regulatory Technical Standards on the content of the notification and reports for major incidents and significant cyber threats and determining the time limits for reporting major incidents and Draft Implementing Technical Standards On the standard forms, templates and procedures for financial entities to report a major incident and to notify a significant cyber threat

FINAL REPORT ON RTS AND ITS ON CONTENT, FORMAT, TIMELINES AND PROCEDURES FOR REPORTING OF MAJOR INCIDENTS AND SIGNIFICANT CYBER THREATS UNDER DORA Contents

1. Executive Summary 3
2. List of abbreviations 4
3. Background and rationale 5
4. Draft regulatory technical standards 15
5. Draft implementing technical standards 21
6. Accompanying documents 84

Read the rest free, and get an email when EBA publishes again

Email me when EBA publishes something newOne email per publication, same day. Sign in below to keep reading.

Lineage: In force

amendssupersedesissued underrefers toproposed or not in RegAlertarrows run from the older text to the one that changes it

Source: European Banking Authority — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works