--- title: "Article 10 — Detection" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554" shortTitle: "Article 10 — Detection" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2022/2554" instrument: dora celex: "32022R2554" regulation: DORA regulation-full: "Regulation (EU) 2022/2554" article: 10 status: in_force text_version: "Regulation (EU) 2022/2554, OJ L 333, 27.12.2022" source_url: "https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng" check_status: matched verified: true last_checked: 2026-11-09 --- *In force · Regulation (EU) 2022/2554, OJ L 333, 27.12.2022 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng)* 1. Financial entities shall have in place mechanisms to promptly detect anomalous activities, in accordance with [Article 17](17.md), including ICT network performance issues and [ICT-related incidents](https://www.headlesslaw.com/definitions/dora/ict-related-incident), and to identify potential material single points of failure. All detection mechanisms referred to in the first subparagraph shall be regularly tested in accordance with [Article 25](25.md). 2. The detection mechanisms referred to in paragraph 1 shall enable multiple layers of control, define alert thresholds and criteria to trigger and initiate [ICT-related incident](https://www.headlesslaw.com/definitions/dora/ict-related-incident) response processes, including automatic alert mechanisms for relevant staff in charge of [ICT-related incident](https://www.headlesslaw.com/definitions/dora/ict-related-incident) response. 3. Financial entities shall devote sufficient resources and capabilities to monitor user activity, the occurrence of ICT anomalies and [ICT-related incidents](https://www.headlesslaw.com/definitions/dora/ict-related-incident), in particular [cyber-attacks](https://www.headlesslaw.com/definitions/dora/cyber-attack). 4. [Data reporting service providers](https://www.headlesslaw.com/definitions/dora/data-reporting-service-provider) shall, in addition, have in place systems that can effectively check trade reports for completeness, identify omissions and obvious errors, and request re-transmission of those reports. *** [Chapter II — ICT risk management](../chapters/ii.md) › Section II · [← Article 9](9.md) · [Article 11 →](11.md)