Skip to the text
In this act Article 2 of 7

Article 2 — Specific information to be provided in initial notifications

Financial servicesLevel 2RTSDORAIn forceOfficial source

Initial notifications as referred to in Article 19(4), point (a), of Regulation (EU) 2022/2554 shall contain at least all of the following specific information:

2(a)
a)the incident reference code assigned by the financial entity;
Copy link
2(b)
b)the date of detection, time of detection, and classification of the incident pursuant to Article 8 of Commission Delegated Regulation (EU) 2024/1772;
Copy link
2(c)
c)a description of the ICT-related incident;
Copy link
2(d)
d)the criteria, laid down in Articles 1 to 8 of Delegated Regulation (EU) 2024/1772, on the basis of which the financial entity classified the ICT-related incident as major;
Copy link
2(e)
e)the Members States that are impacted by the ICT-related incident;
Copy link
2(f)
f)information on how the ICT-related incident was discovered;
Copy link
2(g)
g)where available, information about the origin of the ICT-related incident;
Copy link
2(h)
h)information about whether the financial entity has activated a business continuity plan;
Copy link
2(i)
i)where applicable, information about the reclassification of the ICT-related incident from major to non-major;
Copy link
2(j)
j)where available, any other relevant information.\
Copy link