DORA
RTS ICT Risk Management RTS ICT Incident classification RTS Third Party ICT service policy ITS Register of Information RTS Harmonization of conditions
enabling the conduct of oversight activities RTS Joint examination teams RTS & ITS Major incident reporting RTS Subcontracting ICT services RTS Threat-led penetration testing GUIDELINES Estimation of aggregated
annual costs and losses GUIDELINES Oversight cooperation
and information exchange

GUIDELINES Estimation of aggregated annual costs and losses - JC 2024 34

Overview

This is the regulatory technical standard (RTS) on estimation of aggregated costs supplementing DORA, using the final draft available from the European Banking Authority (EBA) as source. The RTS was submitted by the ESAs the European Commission in July 2024 as mandated by Article 11(11) of DORA. It is expected to become applicable on 17 January 2025 along with DORA.

The RTS on estimation of aggregated costs aims to standardize the estimation of aggregated annual costs and losses arising from major ICT-related incidents, aligning with the requirements of Regulation 2022/2554 (DORA). It seeks to ensure consistency and comparability across incident reporting mandates, minimizing reporting burdens for financial entities by applying proportional criteria for incident classification.

This text is provided as-is and should not be relied upon as an authoritative source. Instead, consult the Official Journal for the authoritative version once published.

We are not aware of any material differences between the draft and authoritative versions but will ensure to update these pages to reflect the authoritative version as soon as possible.

Our commitment is to continuously enhance this platform, improving readability and navigation for your convenience.

Cerca...