EBA · 2024_7060 Rejected question

Lex Specialis NIS2 Directive

Regulation
Regulation (EU) No 2022/2554 (DORA Reg)
Article
Recital 16
Topic
ICT-related incidents (management / classification / reporting)
Submitted by
Industry association
Submitted
2024-04-19
More Q&As on this regulation →

Question

Are financial entities in scope of DORA required to submit incident reports under the NIS2 Directive ahead of DORA coming into effect in January 2025?

Background

While the lex specialis designation will resolve duplicate reporting from January 2025, it remains unclear whether NIS reporting is due during the interim window.
No answer published yet.

Original source: European Banking Authority, Q&A ID 2024_7060

This Q&A is published by European Banking Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.

Similar Q&As

ICT-related incidents (DORA)

Answered 2024-08-29

Duplicate ICT Incident Reporting

Answered 2024-12-11

Understandig of timelimits of intermediate repots for major related ICT-incidents

Answered 2024-04-15

ICT-related incidents (DORA)

Answered 2025-08-08

ICT third-party risk management (DORA)

Answered 2025-11-20

More Q&As on this topic

Scope of Article 6 lit. c RTS

Answered 2026-10-02

Classification of phishing-attacks as a reportable major ICT-related incident

Answered 2026-02-06

Types of "telephone services" included under the definition of "ICT services"

Answered 2026-02-06

Staff costs

Answered 2025-11-14

Duplicate ICT Incident Reporting

Answered 2024-12-11

📋 Track EU financial regulation continuously

Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.

Start free trial → Learn more

14-day free trial. No credit card required.