DORA, Article 18, DE

1. Financial entities shall classify ICT-related incidents and shall determine their impact based on the following criteria:

(a)

the number and/or relevance of clients or financial counterparts affected and, where applicable, the amount or number of transactions affected by the ICT-related incident, and whether the ICT-related incident has caused reputational impact;

(b)

the duration of the ICT-related incident, including the service downtime;

(c)

the geographical spread with regard to the areas affected by the ICT-related incident, particularly if it affects more than two Member States;

(d)

the data losses that the ICT-related incident entails, in relation to availability, authenticity, integrity or confidentiality of data;

(e)

the criticality of the services affected, including the financial entity’s transactions and operations;

(f)

the economic impact, in particular direct and indirect costs and losses, of the ICT-related incident in both absolute and relative terms.

2. Financial entities shall classify cyber threats as significant based on the criticality of the services at risk, including the financial entity’s transactions and operations, number and/or relevance of clients or financial counterparts targeted and the geographical spread of the areas at risk.

Official source

Version: 8f1345ff74271fe2

SHA-256: sha256:8f1345ff74271fe2d5a55ddf68d2789784dbf932ba8480cfda23bace38c38a97

• Article 1
• Article 2
• Article 3
• Article 4
• Article 5
• Article 6
• Article 7
• Article 8
• Article 9
• Article 10
• Article 11
• Article 12
• Article 13
• Article 14
• Article 15
• Article 16
• Article 17
• Article 19
• Article 20
• Article 21
• Article 22
• Article 23
• Article 24
• Article 25
• Article 26
• Article 27
• Article 28
• Article 29
• Article 30
• Article 31
• Article 32
• Article 33
• Article 34
• Article 35
• Article 36
• Article 37
• Article 38
• Article 39
• Article 40
• Article 41
• Article 42
• Article 43
• Article 44
• Article 45
• Article 46
• Article 47
• Article 48
• Article 49
• Article 50
• Article 51
• Article 52
• Article 53
• Article 54
• Article 55
• Article 56
• Article 57
• Article 58
• Article 59
• Article 60
• Article 61
• Article 62
• Article 63
• Article 64

Geographical article agents

Source: NovaCopilot