{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2025/302 — ITS — Major Incident Templates [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/its/2025-302-major-incident-reporting-templates/annexes/annex-iii","url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/annexes/annex-iii","title":"ANNEX III — TEMPLATES FOR NOTIFICATION OF SIGNIFICANT CYBER THREATS","family":"l2_unit_view","work_id":"spaces/dora/level-2/its/2025-302-major-incident-reporting-templates","view_of":"/dora/level-2/its/2025-302-major-incident-reporting-templates","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Implementing Regulation (EU) 2025/302, OJ L, 2025/302, 20.2.2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_impl/2025/302/oj/eng","valid_from":"2025-03-12","valid_until":null,"content_id":"539ec7ef56f54d1c","versions":["2025-03-12"],"version_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/annexes/annex-iii/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/annexes/annex-iii/versions/2026-10-26/rev/539ec7ef56f54d1c","versions_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/annexes/annex-iii/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates/annexes/annex-iii/relations","act_url":"https://www.headlesslaw.com/dora/level-2/its/2025-302-major-incident-reporting-templates#annex-iii","source_line":"Commission Implementing Regulation (EU) 2025/302 · binding · OJ L, 2025/302, 20.2.2025 · dated 23 Oct 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"implementing_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-10-23","published_on":"2025-02-20","entry_into_force":"2025-03-12","locators":{"document_date":"CELLAR 32025R0302 work_date_document","published_on":"CELLAR 32025R0302 official-journal-act_date_publication","entry_into_force":"CELLAR 32025R0302 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/its/2025-302-major-incident-reporting-templates","path":"/dora/level-2/its/2025-302-major-incident-reporting-templates","name":"Commission Implementing Regulation (EU) 2025/302","number":"2025/302","celex":"32025R0302","title_official":"COMMISSION IMPLEMENTING REGULATION (EU) 2025/302 of 23 October 2024 laying down implementing technical standards for the application of Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to the standard forms, templates, and procedures for financial entities to report a major ICT-related incident and to notify a significant cyber threat (Text with EEA relevance)","document_date":"2024-10-23"},"position":{"kind":"annex","key":"annex-iii","index":3,"articles":9,"annexes":4},"prev":{"path":"/dora/level-2/its/2025-302-major-incident-reporting-templates/annexes/annex-ii","key":"annex-ii","title":"ANNEX II — DATA GLOSSARY AND INSTRUCTIONS FOR THE REPORTING OF MAJOR INCIDENTS"},"next":{"path":"/dora/level-2/its/2025-302-major-incident-reporting-templates/annexes/annex-iv","key":"annex-iv","title":"ANNEX IV — DATA GLOSSARY AND INSTRUCTIONS FOR NOTIFICATION OF SIGNIFICANT CYBER THREATS"},"act_anchor":"#annex-iii"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg_impl/2025/302/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/dora/level-2/its/2025-302-major-incident-reporting-templates.md","unit_text_sha256":"3cf4f9390d43e68ac2535a5e72680453dc224b147ba9ca6a487b75d04d006ff5","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/dora/level-2/its/2025-302-major-incident-reporting-templates/annex-iii","kind":"annex","key":"annex-iii","heading":"ANNEX III — TEMPLATES FOR NOTIFICATION OF SIGNIFICANT CYBER THREATS","text":"## ANNEX III — TEMPLATES FOR NOTIFICATION OF SIGNIFICANT CYBER THREATS\n\n| Number of field | Data field |  |\n|---|---|---|\n| 1 | Name of the entity submitting the notification |  |\n| 2 | Identification code of the entity submitting the notification |  |\n| 3 | Type of the financial entity submitting the notification |  |\n| 4 | Name of the financial entity |  |\n| 5 | LEI code of the financial entity |  |\n| 6 | Primary contact person name |  |\n| 7 | Primary contact person email |  |\n| 8 | Primary contact person telephone |  |\n| 9 | Second contact person name |  |\n| 10 | Second contact person email |  |\n| 11 | Second contact person telephone |  |\n| 12 | Date and time of detection of the cyber threat |  |\n| 13 | Description of the significant cyber threat |  |\n| 14 | Information about potential impact |  |\n| 15 | Potential incident classification criteria |  |\n| 16 | Status of the cyber threat |  |\n| 17 | Actions taken to prevent materialisation |  |\n| 18 | Notification to other stakeholders |  |\n| 19 | Indicators of compromise |  |\n| 20 | Other relevant information |  |\n\n","marks":[],"text_hash":"3cf4f9390d43e68ac2535a5e72680453dc224b147ba9ca6a487b75d04d006ff5","revision":1}}