DORA RTS on Incident Reporting

Final reports as referred to in Article 19(4), point (c), of Regulation (EU) 2022/2554 shall contain all of the following specific information:

1. (a)
   information about the root causes of the ICT-related incident;
2. (b)
   dates and times when the ICT-related incident was resolved and the root cause(s) addressed;
3. (c)
   information on the resolution of the ICT-related incident;
4. (d)
   where applicable, information relevant for resolution authorities;
5. (e)
   information about direct and indirect costs and losses stemming from the ICT-related incident and information about financial recoveries;
6. (f)
   where applicable, information about recurring ICT-related incidents.