Translations have been published of the joint guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents. The guidelines supplement the EU Digital Operational Resilience Act (DORA) which requires that financial entities report on request to their national competent authorities an estimation of aggregated annual costs and losses caused by major ICT-related incidents. The guidelines indicate how those estimations should be arrived at and include a related reporting template. The guidelines will apply from 19 May.
[View source.]
