Joint Guidelines on estimation of aggregated annual costs and losses caused by major ICT-related incidents under DORA

JC 2024 34 5 June 2024 Joint Guidelines On the estimation of aggregated annual costs and losses caused by major ICT-related incidents under Regulation (EU) 2022/2554 These Guidelines contain references to EU Commission delegated and implementing regulations that have not yet been published in the EU Official Journal. Once these forthcoming Regulations will have been published in the Official Journal, these Guidelines will be finalised by including these references. The references will be inserted in the sections highlighted in yellow. The date of application of these Guidelines can only be determined once these Guidelines are finalised. The expected date of application of these Guidelines is 17 January 2025. In case there is a delay in finalising these Guidelines, the latest day of application of these Guidelines will be two months following the date of the publication of the translations of these Guidelines in all official EU languages. Joint Guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents Status of these Joint Guidelines This document contains Joint Guidelines issued pursuant to Article 16 of Regulation (EU) No 1093/20101; Article 16 of Regulation (EU) No 1094/2010 2; and Article 16 of Regulation (EU) No 1095/2010 3 - ‘the ESAs’ Regulations’. In accordance with Article 16(3) of the respective ESAs’ Regulations, competent authorities and financial institutions must make every effort to...