--- title: "Article 21 — Centralisation of reporting of major ICT-related incidents" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554" shortTitle: "Article 21 — Centralisation of reporting of major ICT-related incidents" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2022/2554" instrument: dora celex: "32022R2554" regulation: DORA regulation-full: "Regulation (EU) 2022/2554" article: 21 status: in_force text_version: "Regulation (EU) 2022/2554, OJ L 333, 27.12.2022" source_url: "https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng" check_status: matched verified: true last_checked: 2026-11-09 --- *In force · Regulation (EU) 2022/2554, OJ L 333, 27.12.2022 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng)* 1. The ESAs, through the [Joint Committee](https://www.headlesslaw.com/definitions/dora/joint-committee), and in consultation with the ECB and ENISA, shall prepare a joint report assessing the feasibility of further centralisation of incident reporting through the establishment of a single EU Hub for [major ICT-related incident](https://www.headlesslaw.com/definitions/dora/major-ict-related-incident) reporting by financial entities. The joint report shall explore ways to facilitate the flow of [ICT-related incident](https://www.headlesslaw.com/definitions/dora/ict-related-incident) reporting, reduce associated costs and underpin thematic analyses with a view to enhancing supervisory convergence. 2. The joint report referred to in paragraph 1 shall comprise at least the following elements: **(a)** prerequisites for the establishment of a single EU Hub; **(b)** benefits, limitations and risks, including risks associated with the high concentration of sensitive information; **(c)** the necessary capability to ensure interoperability with regard to other relevant reporting schemes; **(d)** elements of operational management; **(e)** conditions of membership; **(f)** technical arrangements for financial entities and national competent authorities to access the single EU Hub; **(g)** a preliminary assessment of financial costs incurred by setting-up the operational platform supporting the single EU Hub, including the requisite expertise. 3. The ESAs shall submit the report referred to in paragraph 1 to the European Parliament, to the Council and to the Commission by 17 January 2025. *** [Chapter III — ICT-related incident management, classification and reporting](../chapters/iii.md) · [← Article 20](20.md) · [Article 22 →](22.md)