<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2024/1772 — RTS — ICT Incident Classification [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/3","url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/3","title":"Article 3 — Duration and service downtime","family":"l2_unit_view","work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","view_of":"/dora/level-2/rts/2024-1772-ict-incident-classification","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2024/1772, OJ L, 2024/1772, 25.6.2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj/eng","valid_from":"2024-07-15","valid_until":null,"content_id":"5d5158e96840dd41","versions":["2024-07-15"],"version_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/3/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/3/versions/2026-10-26/rev/5d5158e96840dd41","versions_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/3/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/3/relations","act_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification#art-3","source_line":"Commission Delegated Regulation (EU) 2024/1772 · binding · OJ L, 2024/1772, 25.6.2024 · dated 13 Mar 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-03-13","published_on":"2024-06-25","entry_into_force":"2024-07-15","locators":{"document_date":"CELLAR 32024R1772 work_date_document","published_on":"CELLAR 32024R1772 official-journal-act_date_publication","entry_into_force":"CELLAR 32024R1772 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","path":"/dora/level-2/rts/2024-1772-ict-incident-classification","name":"Commission Delegated Regulation (EU) 2024/1772","number":"2024/1772","celex":"32024R1772","title_official":"COMMISSION DELEGATED REGULATION (EU) 2024/1772 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents (Text with EEA relevance)","document_date":"2024-03-13"},"position":{"kind":"article","key":"3","index":3,"articles":13,"annexes":0},"prev":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/2","key":"2","title":"Article 2 — Reputational impact"},"next":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/4","key":"4","title":"Article 4 — Geographical spread"},"act_anchor":"#art-3"}}} -->
# Article 3 — Duration and service downtime

**Commission Delegated Regulation (EU) 2024/1772 · binding · OJ L, 2024/1772, 25.6.2024 · dated 13 Mar 2024 [in force]**

*In force · Commission Delegated Regulation (EU) 2024/1772, OJ L, 2024/1772, 25.6.2024 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj/eng)*

1. <a id="art-3-p-1"></a>Financial entities shall measure the duration of an incident as referred to in [Article 18(1)](../../articles/18.md), point (b), of Regulation (EU) 2022/2554, from the moment the incident occurs until the moment when it is resolved.

    Where financial entities are unable to determine the moment when the incident occurred, they shall measure the duration of the incident from the moment it was detected. Where financial entities become aware that the incident occurred prior to its detection, they shall measure the duration from the moment the incident is recorded in network or system logs or other data sources.

    Where financial entities do not yet know when the incident will be resolved or are unable to verify records in logs or other data sources, they shall apply estimates.
2. <a id="art-3-p-2"></a>Financial entities shall measure the service downtime of an incident as referred to in [Article 18(1)](../../articles/18.md), point (b), of Regulation (EU) 2022/2554, from the moment the service is fully or partially unavailable to clients, financial counterparts or other internal or external users to the moment when regular activities or operations have been restored to the level of service that was provided prior to the incident. Where the service downtime causes a delay in the provision of service after regular activities or operations have been restored, the downtime shall be measured from the start of the incident to the moment when that delayed service is fully provided.

    Where financial entities are unable to determine the moment when the service downtime started, they shall measure the service downtime from the moment it was detected.