{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":23,"total":23,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/18","url":"https://www.headlesslaw.com/dora/articles/18","title":"Article 18 — Classification of ICT-related incidents and cyber threats","work_id":"dora","date_state":"past","as_of":"2025-01-17","relations_url":"https://www.headlesslaw.com/dora/articles/18/relations"},"as_of":"2025-01-17","counts":{"uses_term:out":16,"refers_to:out":3,"refers_to:in":2,"implements:in":1,"answers:in":1},"relations":[{"edge_id":"071fd3066e5c6dbaac18","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.1.point.d"}},{"edge_id":"c50ca7b8bf7699f43c3e","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.1.point.b"}},{"edge_id":"272755847f1d42370cc3","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.1.point.c"}},{"edge_id":"0ed20b1d890ca03bf3c4","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major operational or security payment-related incidents","dst_raw":"eu.dora.definition.major-operational-or-security-payment-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/11","url":"/definitions/dora/major-operational-or-security-payment-related-incident","title":"Definitions","key":"3(11)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.a"}},{"edge_id":"285bd252385788136163","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19(1)","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/19","url":"/dora/articles/19","title":"Reporting of major ICT-related incidents and voluntary notification of significant cyber threats","key":"19","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.a"}},{"edge_id":"575f9f4e2dacd917f0f5","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incidents","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.a"}},{"edge_id":"e3de3d99f8913c566aae","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.1.point.f"}},{"edge_id":"2f11aaac28aecd344e4f","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incidents","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.4"}},{"edge_id":"8a7a13cb4d5000f42108","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"medium-sized enterprises","dst_raw":"eu.dora.definition.medium-sized-enterprise","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/64","url":"/definitions/dora/medium-sized-enterprise","title":"Definitions","key":"3(64)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.4"}},{"edge_id":"c71b8aa684803acac166","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"microenterprises","dst_raw":"eu.dora.definition.microenterprise","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/60","url":"/definitions/dora/microenterprise","title":"Definitions","key":"3(60)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.4"}},{"edge_id":"f73804f2993b63346197","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/4","url":"/dora/articles/4","title":"Proportionality principle","key":"4","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.4"}},{"edge_id":"b48f85d9a41b0ed5b4bf","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incident","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.1.point.a"}},{"edge_id":"2fb778aefa1ff4bc2eff","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT-related incidents","dst_raw":"eu.dora.definition.ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/8","url":"/definitions/dora/ict-related-incident","title":"Definitions","key":"3(8)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.1"}},{"edge_id":"f35987bf5e23b19d8979","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"significant cyber threats","dst_raw":"eu.dora.definition.significant-cyber-threat","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/13","url":"/definitions/dora/significant-cyber-threat","title":"Definitions","key":"3(13)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.c"}},{"edge_id":"f31c0c94f404d4c5d19e","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"Joint Committee","dst_raw":"eu.dora.definition.joint-committee","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/62","url":"/definitions/dora/joint-committee","title":"Definitions","key":"3(62)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3"}},{"edge_id":"aae7f69b364a9d68211d","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"cyber threats","dst_raw":"eu.dora.definition.cyber-threat","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/12","url":"/definitions/dora/cyber-threat","title":"Definitions","key":"3(12)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.2"}},{"edge_id":"563fb6feccab4f55b177","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major ICT-related incidents","dst_raw":"eu.dora.definition.major-ict-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/10","url":"/definitions/dora/major-ict-related-incident","title":"Definitions","key":"3(10)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.b"}},{"edge_id":"ca6c2329298b7c07d7d3","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 19(6)","dst_raw":"eu.dora.article.19","other":{"work_id":"dora","level":"L1","locator":"dora/art/19","url":"/dora/articles/19","title":"Reporting of major ICT-related incidents and voluntary notification of significant cyber threats","key":"19","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.b"}},{"edge_id":"e47f7d5cdab806d114ff","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"major operational or security payment-related incidents","dst_raw":"eu.dora.definition.major-operational-or-security-payment-related-incident","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/11","url":"/definitions/dora/major-operational-or-security-payment-related-incident","title":"Definitions","key":"3(11)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.18","source_block_id":"eu.dora.article.18.paragraph.3.point.b"}},{"edge_id":"01f4a7a151cc10c38d1d","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 18(1)","dst_raw":"eu.dora.article.18","other":{"work_id":"dora","level":"L1","locator":"dora/art/20","url":"/dora/articles/20","title":"Harmonisation of reporting content and templates","key":"20","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.20","source_block_id":"eu.dora.article.20"}},{"edge_id":"8e3668966ba81e500727","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 18(1)","dst_raw":"eu.dora.article.18","other":{"work_id":"dora","level":"L1","locator":"dora/art/17/para/3/pt/b","url":"/dora/articles/17#p-3-b","title":"ICT-related incident management process","key":"17(3)(b)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.17","source_block_id":"eu.dora.article.17.paragraph.3.point.b"}},{"edge_id":"d3ae8e3af3e5d5ffc538","scope":"unit","type":"implements","direction":"in","resolution":"resolved","basis":"curated_mapping","method":"stated_legal_basis","confidence":"curated","src_from":"2024-07-15","src_until":null,"span":null,"dst_raw":"eu.dora.article.18","other":{"work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","level":"L2","locator":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification/head","url":"/dora/level-2/rts/2024-1772-ict-incident-classification","title":"RTS — ICT Incident Classification [in force]","key":"2024/1772","state_on_date":"in_force"},"evidence":{"evidence":"legal_basis: Articles 18(3) and 20 DORA | CELLAR 32024R1772: A18P4L3","doc_type":"rts"}},{"edge_id":"623c47b2f7c809cc2ab6","scope":"unit","type":"answers","direction":"in","resolution":"resolved","basis":"curated_mapping","method":"stated_legal_basis","confidence":"curated","src_from":"2024-12-11","src_until":null,"span":null,"dst_raw":"eu.dora.article.18","other":{"work_id":"spaces/dora/level-3/q-and-a/eba/eba-qa-2024-7047-critical-services-affected","level":"L3","locator":"spaces/dora/level-3/q-and-a/eba/eba-qa-2024-7047-critical-services-affected/page","url":"/dora/level-3/q-and-a/eba/eba-qa-2024-7047-critical-services-affected","title":"Q&A — Critical Services Affected [Final Q&A]","key":"EBA Q&A 2024_7047","state_on_date":"in_force"},"evidence":{"evidence":"legal_basis: Article 18(3) DORA","doc_type":"qa"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}