EIOPA · DORA220 - 3307
ICT-related incidents (DORA)
- Regulation
- (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
- Topic
- ICT-related incidents (DORA)
- Submitted
- 2025-03-27
- Answered
- 2025-08-08
Question
What is the expected submission format for incident reports (initial notification, intermediate and final report) to the CAs? Will there be a data-point model provided by the ESAs?
Background
I have read the RTS and ITS regarding Incident management for DORA and it is unclear as to what the submission format should be for the reports (initial notification, intermediate and final report) for CTPPs and Financial Entities to submit to their CAs.
Answer
This question has been rejected because it is seeking bespoke advice.
This Q&A is published by European Insurance and Occupational Pensions Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.
Similar Q&As
ICT-related incidents (DORA)
Answered 2025-02-19
ICT-related incidents (DORA)
Answered 2024-08-29
Duplicate ICT Incident Reporting
Answered 2024-12-11
Understandig of timelimits of intermediate repots for major related ICT-incidents
Answered 2024-04-15
ICT third-party risk management (DORA)
Answered 2025-07-25
More Q&As on this topic
📋 Track EU financial regulation continuously
Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.
14-day free trial. No credit card required.