European Commission 13 March 2024, Commission Delegated Regulation (EU) 2024/1772 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents

Also known as

European Union · · · Cited by 17 · 13-03-2024

CHAPTER I. CLASSIFICATION CRITERIA
Article 1. Clients, financial counterparts and transactions
Article 2. Reputational impact
Article 3. Duration and service downtime
Article 4. Geographical spread
Article 5. Data losses
Article 6. Criticality of services affected
Article 7. Economic impact
CHAPTER II. MAJOR INCIDENTS AND MATERIALITY THRESHOLDS
Article 8. Major incidents
Article 9. Materiality thresholds for determining major incidents
CHAPTER III. SIGNIFICANT CYBER THREATS
Article 10. High materiality thresholds for determining significant cyber threats
CHAPTER IV. RELEVANCE OF MAJOR INCIDENTS TO COMPETENT AUTHORITIES IN OTHER MEMBER STATES AND DETAILS OF REPORTS TO BE SHARED WITH OTHER COMPETENT AUTHORITIES
Article 11. Relevance of major incidents to competent authorities in other Member States
Article 12. Details of major incidents to be shared with other competent authorities
CHAPTER V. FINAL PROVISIONS
Article 13. Entry into force

Official Journal
of the European Union

L series

2024/1772

25.6.2024

COMMISSION DELEGATED REGULATION (EU) 2024/1772

of 13 March 2024

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting

Read the full text

This document is published by eur-lex.europa.eu.

Moonlit adds the citation network (17 references), article-level links and cross-references, which are available to search for free.