EC: DORA Delegated and Implementing Regulations
20 Feb 2025 (UPDATED: 13 Mar 2026)
International
1 min read
The following have been published in the Official Journal: (i) Commission Delegated Regulation (EU) 2025/301 of 23 October 2024 supplementing DORA with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats; (ii) Commission Implementing Regulation (EU) 2025/302 of 23 October 2024 laying down implementing technical standards for the application of DORA with regard to the standard forms, templates, and procedures for financial entities to report a major ICT-related incident and to notify a significant cyber threat.