5. In the view of the ESAs, four ICT-related incident reporting mandates conferred on the ESAs under DORA are closely linked with one another, namely:
- the Guidelines on the annual aggregation of costs and losses of major ICT-related incidents under Article 11(11) DORA that are being proposed in this CP,
- the Regulatory Technical Standard (RTS) on the classification of ICT-related incidents under Article 18(3) DORA that was published for consultation on 19 June 2023, and
- the RTS as well as the Implementing Technical Standard (ITS) on reporting of major ICT- related incidents under Article 20 DORA are being published for consultation in parallel with this CP.
6. All these mandates include a requirement related to costs and losses of ICT-related incidents, albeit for different purposes. The RTS on the classification of ICT-related incidents includes an overall assessment of the likely economic impact against a threshold of 100 000 EUR, which is used as a criterion for the classificat
…