On Jun. 27, NLD AFM issued DORA update on ICT-related incidents.
NLD AFM issued fourth update explaining substantive aspects of the Digital Operational Resilience Act (DORA), with focus on discussion of ICT-related incidents.
Follows NLD AFM Apr. 2024 made recommendations on ICT security, see #209088.
ICT-Related Incidents
Important that ICT-related incidents are adequately detected and handled.
Requires a robust management process, consistent classification and registration, and reporting to the regulator; contributes to greater digital resilience of companies.
DORA update examines management of ICT incidents, classification and registration of ICT incidents, and reporting of serious ICT incidents and significant cyber threats.
Requirements applicable to ICT-related incidents described in Chapter III (Art. 17-23).
Some requirements elaborated in the regulatory technical standard (RTS) for Art. 15, 18(3), 20(a) and implementing technical standard (ITS) for Art. 20(b).
Regulation Supervision
Companies have until Jan. 2025 to comply with DORA regulations.
DORA will then officially apply: NLD AFM and NLD DNB will supervise the regulation.
DORA-related requirements from existing legislation already apply to some companies.
