{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":14,"total":14,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/17","url":"https://www.headlesslaw.com/dora/articles/17","title":"Article 17 — ICT-related incident management process","work_id":"dora","date_state":"past","as_of":"2023-01-16","relations_url":"https://www.headlesslaw.com/dora/articles/17/relations"},"as_of":"2023-01-16","counts":{"uses_term:out":11,"refers_to:out":2,"refers_to:in":1},"relations":[{"edge_id":"a86a919e125d3ef46c97","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.f"}},{"edge_id":"4e68c26a2113af39e506","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3"}},{"edge_id":"ea1f102a666fa7800923","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.c"}},{"edge_id":"52055cec3c5bd58e21f5","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incidents","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.2"}},{"edge_id":"d3a1741630037feb200c","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"significant cyber threats","dst_raw":"eu.dora.definition.significant-cyber-threat","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/13","url":"/definitions/dora/significant-cyber-threat","title":"Definitions","key":"3(13)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.2"}},{"edge_id":"8cca22f34063c9de823d","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 14","dst_raw":"eu.dora.article.14","other":{"work_id":"dora","level":"L1","locator":"dora/art/14","url":"/dora/articles/14","title":"Communication","key":"14","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.d"}},{"edge_id":"020de32f9324e51d4564","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incidents","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.e"}},{"edge_id":"4759dde8ecc4a0a7fad7","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incidents","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.e"}},{"edge_id":"5c5f7ae5728e5660dd15","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"management body","dst_raw":"eu.dora.definition.management-body","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/30","url":"/definitions/dora/management-body","title":"Definitions","key":"3(30)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.e"}},{"edge_id":"8e3668966ba81e500727","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 18(1)","dst_raw":"eu.dora.article.18","other":{"work_id":"dora","level":"L1","locator":"dora/art/18","url":"/dora/articles/18","title":"Classification of ICT-related incidents and cyber threats","key":"18","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.b"}},{"edge_id":"ea0b3e940878ddfd8ab9","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incidents","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.b"}},{"edge_id":"bab3b4c675cfa10bf01b","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incidents","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.1"}},{"edge_id":"edf0d8b407e778f6c22d","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.1"}},{"edge_id":"f895b52557e76e604c3b","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 17","dst_raw":"eu.dora.article.17","other":{"work_id":"dora","level":"L1","locator":"dora/art/10/para/1","url":"/dora/articles/10#p-1","title":"Detection","key":"10(1)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.10","source_block_id":"eu.dora.article.10.paragraph.1"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}