[non-validated] DORA SFS 7 / SF 2: Final Incident Reporting
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Within 1 month of incident classification, has the applicable entity submitted the final incident report using current competent authority templates under Regulation (EU) 2022/2554 Article 19 and EBA RTS as specified in repository documentation?
Explanation
[non-validated] Has the applicable financial entity submitted the final incident report to the competent authority within one month of incident classification, using current official templates required by Regulation (EU) 2022/2554 (DORA) Article 19 and EBA RTS?
Criterion and evidence
Verifies final incident report submission per DORA Article 19 by applicable financial entities within 1 month of classification using current competent authority templates (EBA RTS effective 2025-03-12); evidence must be dated after regulatory publication.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Incident reporting and communications. Notify and report applicable incidents using current competent-authority requirements and communication plans. Cover initial/intermediate/final reports, voluntary significant-threat notifications, delegated reporting responsibilities, client/stakeholder communication and applicable operational/payment-security incidents. Verify current RTS/ITS timing and templates from sources; do not invent deadlines or assume one authority for every entity. DORA article references: 14, 19, 20, 21, 22, 23. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence for compliance?
Verified submission receipt dated within one month of incident classification using current competent authority templates specified in DORA Article 19 and EBA RTS (published 2024-07-17, effective 2025-03-12). Missing evidence remains pending; no valid alternatives satisfy this requirement.
References
DORA: Incident reporting and communications