Glossary
Major ICT-related incident
An ICT incident whose severity exceeds defined thresholds, triggering an obligation to notify the authorities.
A major ICT-related incident is an event (cyberattack, outage, human error, provider failure...) whose impact — measured against harmonised severity criteria (clients affected, duration, geographical spread, data losses, criticality of the services affected...) — exceeds the thresholds set by DORA's technical standards.
Beyond this threshold, the financial entity must notify the incident to its competent authority according to a strict timeline: an initial notification, one or more intermediate reports, then a final report.