1. European
  2. ESA - Joint Committee - European Supervisory Authorities
  3. Draft ITS
  4. 2024
Date-stamp loading
  1. Final Report - Draft Regulatory Technical Standards on the content of the notification and reports for major incidents and significant cyber threats and determining the time limits for reporting major incidents and Draft Implementing Technical Standards on the standard forms, templates and procedures for financial entities to report a major incident and to notify a significant cyber threat (JC 2024 33)
  2. 4. Draft regulatory technical standards
  3. Article 7 Content of the voluntary notification of significant cyber threat
Previous Next
Version date: 17 July 2024 - onwards

Article 7 Content of the voluntary notification of significant cyber threat

The content of the notification in relation to significant cyber threats in accordance with Article 19(2) of Regulation (EU) 2022/2554 shall cover:

a) general information about the reporting entity as set out in Article 4;

b) date and time of detection of the significant cyber threat and any other relevant timestamps related to the threat;

c) description of the significant cyber threat;

d) information about the potential impact of the cyber threat on the financial entity, its clients and/or financial counterparts;

e) the classification criteria that would have triggered a major incident report, if the cyber threat had materialised;

f) information about the status of the cyber threat and any changes in the threat activity;

g) description of the actions taken by the financial entity to prevent the materialisation of the significant cyber threats, where applicable; and

h) information about notification of the cyber threat to other financial entities or authorities;

i) information on indic

…
Comparing proposed amendment...
Previous Next