Regulatory Alerts2025-03-18
Added · Updated
Guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents
Financial entities must estimate and report the aggregated annual costs and losses of major ICT-related incidents to competent authorities using a specified template. The estimation requires aggregating gross costs and losses alongside financial recoveries for incidents classified as major under Commission Delegated Regulation 2024/1772, based on data from the relevant reference year. Competent authorities must notify the European Supervisory Authorities of their compliance with these guidelines by 19 May 2025, and the guidelines apply from 19 May 2025.
More like this from ESMA
We email you every new ESMA publication the day it's published.
Topics
Share