RTS for the content of notifications and reports on major ICT incidents under DORA (DORA package 2)
Initiative
Official name
COMMISSION DELEGATED REGULATION (EU) 2025/301 of 23 October 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with
regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats
regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats
Type
Delegated Regulation
Level 2
Initiator
ESAs
Submitted
08.12.2023
Doc. code
2025/301
Summary
Status
Status
Get a subscription to have access to the whole content.
Current version
Final version
Next step
Entry into force and application
Entry into force
Get a subscription to have access to the whole content.
Application date
Get a subscription to have access to the whole content.
Scope
Relevant for
Get a subscription to have access to the whole content.
Associated initiatives
Level 1
DORA - Improving digital operational resilience against cyberattacks
(binding, Main version, EU)
Level 2
–
Level 3 / Other
–
Source: ESAs, 2025/301, 2024