EU-DORA-18-01
Requirement
18 — Classification of ICT-related incidents and cyber threats
Classify ICT-related incidents based on specified criteria
Description
Financial entities must classify ICT-related incidents and determine their impact using the six specified criteria: number/relevance of affected clients or counterparts and transactions, duration including service downtime, geographical spread, data losses, criticality of affected services, and economic impact.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-18-02
Requirement
Classify cyber threats as significant based on specified criteria
EU-DORA-18-03
Requirement
Develop draft regulatory technical standards for incident classification criteria
EU-DORA-18-04
Requirement
Develop draft regulatory technical standards for competent authority assessment criteria
EU-DORA-18-05
Requirement
Develop draft regulatory technical standards for cyber threat classification criteria
EU-DORA-18-06
Requirement
Consider specific criteria when developing regulatory technical standards
EU-DORA-18-07
Requirement
Submit draft regulatory technical standards by specified deadline
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started