Article 21 — Centralisation of reporting of major ICT-related incidents
Financial servicesLevel 1RegulationDORAStage: AdoptedStage 3 of 3: Proposal → Agreed → AdoptedVerifiedIdentical to the official source.Official source
21(1)Copy link
1.The ESAs, through the Joint Committee, and in consultation with the ECB and ENISA, shall prepare a joint report assessing the feasibility of further centralisation of incident reporting through the establishment of a single EU Hub for major ICT-related incident reporting by financial entities. The joint report shall explore ways to facilitate the flow of ICT-related incident reporting, reduce associated costs and underpin thematic analyses with a view to enhancing supervisory convergence.
21(2)Copy link
2.The joint report referred to in paragraph 1 shall comprise at least the following elements:
21(2)(b)
(b)benefits, limitations and risks, including risks associated with the high concentration of sensitive information;
Copy link21(2)(c)
(c)the necessary capability to ensure interoperability with regard to other relevant reporting schemes;
Copy link21(2)(f)
(f)technical arrangements for financial entities and national competent authorities to access the single EU Hub;
Copy link