{"object_type":"business_agent","schema_version":1,"id":"agent:eu:business:dora-ict-incident","question":"What must a financial entity report after a major ICT incident?","affected_business":["Financial services firm"],"decision":"Yes, major ICT-related incidents must be reported to the competent authority.","obligation":"Classify incidents, submit initial, intermediate and final reports and inform affected clients.","risk":{"risk_level":"not_in_register","risk_factors":[]},"action":["Classify the incident under the DORA criteria","Submit the initial notification","Submit the intermediate report","Submit the final report"],"deadline":"Three reports under Article 19(4); the exact time limits are set in the regulatory technical standards.","verification":{"sha256":"860c26296bb9d3a8b63deab9df539b6f26a38b40d78b64611caee9e5997b249f","read_at":"2026-10-15","sources":["https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554","https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554","https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554"],"source":"Source: NovaCopilot"},"related":[{"id":"eu:dora","type":"action_kit","url":"https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:dora"},{"id":"agent:eu:business:aml-customer-due-diligence","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:aml-customer-due-diligence"},{"id":"agent:eu:business:aml-suspicious-transaction-report","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:aml-suspicious-transaction-report"},{"id":"agent:eu:business:mica-asset-referenced-token","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:mica-asset-referenced-token"},{"id":"agent:eu:business:mica-casp-authorisation","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:mica-casp-authorisation"},{"id":"agent:eu:business:mica-e-money-token","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:mica-e-money-token"},{"id":"agent:eu:business:mica-white-paper","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:eu:business:mica-white-paper"},{"id":"agent:us:business:glba-safeguards-notice","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:glba-safeguards-notice"},{"id":"agent:us:business:sec-cyber-incident","type":"business_agent","url":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent:us:business:sec-cyber-incident"}],"next_questions":["When must a listed company disclose a cyber incident?","Must a non-bank financial firm report a data breach to the FTC?","What is needed before offering a crypto-asset to the public in the EU?","Do I need a licence to provide crypto-asset services in the EU?","What is required to issue an asset-referenced token in the EU?"],"version":"860c26296bb9d3a8","updated_at":"2026-10-15","first_published":"2026-10-14","changes_url":"https://legal.exploreworldai.com/api/public/v1/business-agent-changes","source":"NovaCopilot","versions":{"model":"1.0","agent_version":"22590960ca813f63","risk_version":"ce4f350740d6638f","decision_version":"973bd3609777b94f","package_version":"e1b16760d2bc919a","change_score":0.25,"changed_dimensions":["package"],"changed_at":"2026-10-15","verified_at":"2026-10-15","next_check":"2026-10-22","is_current":true,"supersedes":[{"dimension":"package","version":"1d62bb5ea6ffd73f","until":"2026-10-15"}],"verify_url":"https://legal.exploreworldai.com/api/public/v1/versions/verify?id=agent%3Aeu%3Abusiness%3Adora-ict-incident","changes_url":"https://legal.exploreworldai.com/api/public/v1/living-versions","note":"change_score measures freshness only, never ranking.","impact":"not_in_register"},"_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/business-agent","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"access_class":"decision","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T11:58:48.701Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/business-agent?id=agent%3Aeu%3Abusiness%3Adora-ict-incident&view=compact","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1273}}