Skip to the text
Text as of 16 Jan 2023 · Regulation (EU) 2022/2554, OJ L 333, 27.12.2022 · Same wording as today’s text.Today’s text

Article 21 — Centralisation of reporting of major ICT-related incidents

Financial servicesLevel 1RegulationDORAApplies from 17 Jan 2025VerifiedOfficial source

21(1)

1.The ESAs, through the Joint Committee, and in consultation with the ECB and ENISA, shall prepare a joint report assessing the feasibility of further centralisation of incident reporting through the establishment of a single EU Hub for major ICT-related incident reporting by financial entities. The joint report shall explore ways to facilitate the flow of ICT-related incident reporting, reduce associated costs and underpin thematic analyses with a view to enhancing supervisory convergence.

Copy link
21(2)

2.The joint report referred to in paragraph 1 shall comprise at least the following elements:

Copy link
21(2)(a)
(a)prerequisites for the establishment of a single EU Hub;
Copy link
21(2)(b)
(b)benefits, limitations and risks, including risks associated with the high concentration of sensitive information;
Copy link
21(2)(c)
(c)the necessary capability to ensure interoperability with regard to other relevant reporting schemes;
Copy link
21(2)(d)
(d)elements of operational management;
Copy link
21(2)(e)
(e)conditions of membership;
Copy link
21(2)(f)
(f)technical arrangements for financial entities and national competent authorities to access the single EU Hub;
Copy link
21(2)(g)
(g)a preliminary assessment of financial costs incurred by setting-up the operational platform supporting the single EU Hub, including the requisite expertise.
Copy link
21(3)

3.The ESAs shall submit the report referred to in paragraph 1 to the European Parliament, to the Council and to the Commission by 17 January 2025.

Copy link