Question ID: DORA220 - 3307
Regulation Reference: (EU) 2022/2554 - Digital Operational Resilience Act (DORA)
Topic: ICT-related incidents (DORA)
Status: Rejected
Date of submission: 27 Mar 2025
Question
What is the expected submission format for incident reports (initial notification, intermediate and final report) to the CAs? Will there be a data-point model provided by the ESAs?
Background of the question
I have read the RTS and ITS regarding Incident management for DORA and it is unclear as to what the submission format should be for the reports (initial notification, intermediate and final report) for CTPPs and Financial Entities to submit to their CAs.
EIOPA answer
This question has been rejected because it is seeking bespoke advice.