{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-17","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-17)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-03","fingerprint":"ewai:eu:ea5c38","proof":"sha256:2625b007fbafa8988582ab980b2ac86d462fb40d64af3bb6a919af1f7a243330","jurisdiction":"eu"},"brand_source":"Source: NovaCopilot","object_type":"article_agent","schema_version":"1.0.0","id":"agent:eu:dora:art-17","act":"dora-2022-2554","article":"17","text_sha256":"d832b20e9fbb2e6c7d01244697eba776d01b7335738bda593699237161c419c1","obligations":["obligation:eu:dora-2022-2554-art-17-financial-entity"],"agent":"agent:eu:dora","name":"NovaCopilot DORA Agent, Article 17","title":{"en":"ICT-related incident management process","sv":"Process för hantering av IKT-relaterade incidenter","de":"Prozess für die Behandlung IKT-bezogener Vorfälle"},"text":{"lang":"en","paragraphs":["1. Financial entities shall define, establish and implement an ICT-related incident management process to detect, manage and notify ICT-related incidents.","2. Financial entities shall record all ICT-related incidents and significant cyber threats. Financial entities shall establish appropriate procedures and processes to ensure a consistent and integrated monitoring, handling and follow-up of ICT-related incidents, to ensure that root causes are identified, documented and addressed in order to prevent the occurrence of such incidents.","3. The ICT-related incident management process referred to in paragraph 1 shall:","(a)","put in place early warning indicators;","(b)","establish procedures to identify, track, log, categorise and classify ICT-related incidents according to their priority and severity and according to the criticality of the services impacted, in accordance with the criteria set out in Article 18(1);","(c)","assign roles and responsibilities that need to be activated for different ICT-related incident types and scenarios;","(d)","set out plans for communication to staff, external stakeholders and media in accordance with Article 14 and for notification to clients, for internal escalation procedures, including ICT-related customer complaints, as well as for the provision of information to financial entities that act as counterparts, as appropriate;","(e)","ensure that at least major ICT-related incidents are reported to relevant senior management and inform the management body of at least major ICT-related incidents, explaining the impact, response and additional controls to be established as a result of such ICT-related incidents;","(f)"],"source_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32022R2554","read_at":"2026-08-18"},"sha256":"2a20e25879dda1d36120799ab876b4022fbebd6968c3f9948c60513981af4a35","duties":[{"id":"obligation:eu:dora-2022-2554-art-17-financial-entity","role":"financial-entity","duty":"Define and implement an ICT-related incident management process."}],"applies_to_role":{"status":"verified","roles":["financial-entity"],"entity_types":[{"role":"credit-institution","parent_role":"financial-entity","article":"2(1)(a)"},{"role":"payment-institution","parent_role":"financial-entity","article":"2(1)(b)"},{"role":"account-information-service-provider","parent_role":"financial-entity","article":"2(1)(c)"},{"role":"electronic-money-institution","parent_role":"financial-entity","article":"2(1)(d)"},{"role":"investment-firm","parent_role":"financial-entity","article":"2(1)(e)"},{"role":"crypto-asset-service-provider","parent_role":"financial-entity","article":"2(1)(f)"},{"role":"central-securities-depository","parent_role":"financial-entity","article":"2(1)(g)"},{"role":"central-counterparty","parent_role":"financial-entity","article":"2(1)(h)"},{"role":"trading-venue","parent_role":"financial-entity","article":"2(1)(i)"},{"role":"trade-repository","parent_role":"financial-entity","article":"2(1)(j)"},{"role":"aifm","parent_role":"financial-entity","article":"2(1)(k)"},{"role":"management-company","parent_role":"financial-entity","article":"2(1)(l)"},{"role":"data-reporting-service-provider","parent_role":"financial-entity","article":"2(1)(m)"},{"role":"insurer","parent_role":"financial-entity","article":"2(1)(n)"},{"role":"insurance-intermediary","parent_role":"financial-entity","article":"2(1)(o)"},{"role":"iorp","parent_role":"financial-entity","article":"2(1)(p)"},{"role":"credit-rating-agency","parent_role":"financial-entity","article":"2(1)(q)"},{"role":"critical-benchmark-administrator","parent_role":"financial-entity","article":"2(1)(r)"},{"role":"crowdfunding-service-provider","parent_role":"financial-entity","article":"2(1)(s)"},{"role":"securitisation-repository","parent_role":"financial-entity","article":"2(1)(t)"}]},"applies_to_industry":{"status":"derived","industries":["banking","insurance"]},"cross_industry_chains":{"status":"not_in_register","chains":[]},"revenue_exposure":{"status":"not_in_register","reason":"member_state_penalties","sanction_article":"50","source_url":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj","via":"article 50"},"links":{"article_page":"https://legal.exploreworldai.com/eu/rattsakter/dora-2022-2554/artikel-17","regulation_agent":"https://legal.exploreworldai.com/api/public/v1/article-agents?reg=dora","changes":"https://legal.exploreworldai.com/api/public/v1/intelligence-graph/change?reg=dora"},"llm_used":false,"hash":"sha256:2625b007fbafa8988582ab980b2ac86d462fb40d64af3bb6a919af1f7a243330","version":"legal-2026-11-03","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-03+legal-2026-11-03+2026-11-03T08:46:54","content_hash":"sha256:2625b007fbafa8988582ab980b2ac86d462fb40d64af3bb6a919af1f7a243330","revalidate_after":"2026-11-03T09:56:53.660Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-17","disclaimer":"Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.","content_notice":{"legal_advice":false,"nature":"Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.","kinds":{"official_text":"Officiell källtext, ordagrann och ej tolkad","summary":"Sammanfattning, ej juristgranskad. Läs alltid källtexten","classification":"Automatisk märkning ur källans egen text, ej juristgranskad"},"rule":"Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"access_class":"public","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T08:56:54.062Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Adora%3Aart-17","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":2255}}