convert_library_version: 'v2 ; Compat Mode: [0] {[v2.1] (DEFAULT) Don''t use any Compatibility
  Mode}'
urn: urn:intuitem:risk:library:rts-dora-incident-reporting_official
locale: en
ref_id: RTS-DORA-incident-reporting_official
name: RTS DORA - Incident reporting
description: 'Commission Delegated Regulation (EU) 2025/301 of 23 October 2024 supplementing
  Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard
  to regulatory technical standards specifying the content and time limits for the
  initial notification of, and intermediate and final report on, major ICT-related
  incidents, and the content of the voluntary notification for significant cyber threats


  Lien : https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32025R0301'
copyright: EUROPEAN COMMISSION
version: 1
publication_date: 2025-09-19
provider: EUROPEAN COMMISSION
packager: intuitem
translations:
  fr:
    name: "RTS DORA - Rapports d\u2019incidents"
    description: "R\xE8glement d\xE9l\xE9gu\xE9 (UE) 2025/301 de la Commission du\
      \ 23\_octobre 2024 compl\xE9tant le r\xE8glement (UE)\_2022/2554 du Parlement\
      \ europ\xE9en et du Conseil par des normes techniques de r\xE9glementation pr\xE9\
      cisant le contenu et les d\xE9lais pour la notification initiale des incidents\
      \ majeurs li\xE9s aux TIC, et pour les rapports interm\xE9diaire et final y\
      \ aff\xE9rents, et le contenu de la notification volontaire en ce qui concerne\
      \ les cybermenaces importantes\n\nLien : https://eur-lex.europa.eu/legal-content/FR/TXT/?uri=CELEX:32025R0301"
    copyright: "COMMISSION EUROP\xC9ENNE"
objects:
  framework:
    urn: urn:intuitem:risk:framework:rts-dora-incident-reporting_official
    ref_id: RTS-DORA-incident-reporting_official
    name: RTS DORA incident reporting
    description: 'Commission Delegated Regulation (EU) 2025/301 of 23 October 2024
      supplementing Regulation (EU) 2022/2554 of the European Parliament and of the
      Council with regard to regulatory technical standards specifying the content
      and time limits for the initial notification of, and intermediate and final
      report on, major ICT-related incidents, and the content of the voluntary notification
      for significant cyber threats


      Lien : https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32025R0301'
    translations:
      fr:
        name: "RTS DORA - Rapports d\u2019incidents"
        description: "R\xE8glement d\xE9l\xE9gu\xE9 (UE) 2025/301 de la Commission\
          \ du 23\_octobre 2024 compl\xE9tant le r\xE8glement (UE)\_2022/2554 du Parlement\
          \ europ\xE9en et du Conseil par des normes techniques de r\xE9glementation\
          \ pr\xE9cisant le contenu et les d\xE9lais pour la notification initiale\
          \ des incidents majeurs li\xE9s aux TIC, et pour les rapports interm\xE9\
          diaire et final y aff\xE9rents, et le contenu de la notification volontaire\
          \ en ce qui concerne les cybermenaces importantes\n\nLien : https://eur-lex.europa.eu/legal-content/FR/TXT/?uri=CELEX:32025R0301"
    requirement_nodes:
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      assessable: false
      depth: 1
      name: Recitals
      translations:
        fr:
          name: "Pr\xE9ambule"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-1
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 1
      description: To ensure the harmonisation and simplication of the notification
        and reporting requirements for major ICT-related incidents referred to in
        Article 19(4) of Regulation (EU) 2022/2554, the time limits for reporting
        major ICT-related incidents should follow a consistent approach for all types
        of financial entities. For these reasons, the time limits should also, to
        the greatest extent possible, follow a consistent approach with, and at least
        be equivalent in effect to, the requirements set out in Directive (EU) 2022/2555
        of the European Parliament and of the Council (2).
      translations:
        fr:
          name: "Pr\xE9ambule 1"
          description: "Afin de garantir l\u2019harmonisation et la simplification\
            \ des exigences en mati\xE8re de notification et de d\xE9claration des\
            \ incidents majeurs li\xE9s aux TIC vis\xE9es \xE0 l\u2019article 19,\
            \ paragraphe 4, du r\xE8glement (UE) 2022/2554, les d\xE9lais de notification\
            \ des incidents majeurs li\xE9s aux TIC devraient suivre une approche\
            \ coh\xE9rente pour tous les types d\u2019entit\xE9s financi\xE8res. Pour\
            \ ces raisons, les d\xE9lais devraient \xE9galement, dans toute la mesure\
            \ du possible, suivre une approche coh\xE9rente avec les exigences \xE9\
            nonc\xE9es dans la directive (UE) 2022/2555 du Parlement europ\xE9en et\
            \ du Conseil (2), et avoir au moins un effet \xE9quivalent \xE0 celles-ci."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-2
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 2
      description: To avoid imposing an undue reporting burden on financial entities
        at a time when they are handling the ICT-related incident, the content of
        the initial notification should be limited to the most significant information.
        To be able to take proper supervisory action, competent authorities need to
        receive information about major ICT-related incidents as quickly as possible
        after the financial entity has classified an ICT-related incident as major.
        Consequently, the time limit for submitting an initial notification as referred
        to in Article 19(4), point (a), of Regulation (EU) 2022/2554 should be as
        short as possible after an ICT-related incident has been classified as major,
        whilst still allowing for flexibility, especially for service business models
        that are not particularly time-critical, in case financial entities need more
        time to handle the ICT-related incident after becoming aware of it.
      translations:
        fr:
          name: "Pr\xE9ambule 2"
          description: "Afin d\u2019\xE9viter d\u2019imposer une charge de d\xE9claration\
            \ excessive aux entit\xE9s financi\xE8res lorsqu\u2019elles traitent l\u2019\
            incident li\xE9 aux TIC, le contenu de la notification initiale devrait\
            \ \xEAtre limit\xE9 aux informations les plus importantes. Pour pouvoir\
            \ prendre des mesures de surveillance appropri\xE9es, les autorit\xE9\
            s comp\xE9tentes doivent recevoir des informations sur les incidents majeurs\
            \ li\xE9s aux TIC le plus rapidement possible apr\xE8s que l\u2019entit\xE9\
            \ financi\xE8re a class\xE9 un incident li\xE9 aux TIC comme majeur. Par\
            \ cons\xE9quent, le d\xE9lai de soumission d\u2019une notification initiale\
            \ vis\xE9e \xE0 l\u2019article 19, paragraphe 4, point a), du r\xE8glement\
            \ (UE) 2022/2554 devrait \xEAtre aussi court que possible apr\xE8s qu\u2019\
            un incident li\xE9 aux TIC a \xE9t\xE9 class\xE9 comme majeur, tout en\
            \ permettant une certaine souplesse, en particulier pour les mod\xE8les\
            \ commerciaux de services qui ne sont pas particuli\xE8rement limit\xE9\
            s dans le temps, si les entit\xE9s financi\xE8res ont besoin de plus de\
            \ temps pour traiter l\u2019incident li\xE9 aux TIC apr\xE8s en avoir\
            \ pris connaissance."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-3
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 3
      description: After having received the initial notification, competent authorities
        should receive more detailed information about the ICT-related incident in
        the intermediate report and all relevant information in the final report.
        The information in those reports should enable competent authorities to further
        assess the ICT-related incident and evaluate supervisory actions they may
        want to take.
      translations:
        fr:
          name: "Pr\xE9ambule 3"
          description: "Apr\xE8s avoir re\xE7u la notification initiale, les autorit\xE9\
            s comp\xE9tentes devraient recevoir des informations plus d\xE9taill\xE9\
            es sur l\u2019incident li\xE9 aux TIC dans le rapport interm\xE9diaire\
            \ et toutes les informations pertinentes dans le rapport final. Les informations\
            \ contenues dans ces rapports devraient permettre aux autorit\xE9s comp\xE9\
            tentes d\u2019\xE9valuer plus avant l\u2019incident li\xE9 aux TIC et\
            \ d\u2019\xE9valuer les mesures de surveillance qu\u2019elles pourraient\
            \ souhaiter prendre."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-4
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 4
      description: The reporting time limits referred to in Article 20, first paragraph,
        point (a)(ii), of Regulation (EU) 2022/2554 should therefore balance the need
        for competent authorities to receive the information quickly, with the need
        to provide financial entities with sufficient time to obtain complete and
        accurate information.
      translations:
        fr:
          name: "Pr\xE9ambule 4"
          description: "Les d\xE9lais de notification vis\xE9s \xE0 l\u2019article\
            \ 20, premier alin\xE9a, point a), ii), du r\xE8glement (UE) 2022/2554\
            \ devraient donc \xE9tablir un \xE9quilibre entre la n\xE9cessit\xE9 pour\
            \ les autorit\xE9s comp\xE9tentes de recevoir rapidement les informations\
            \ et la n\xE9cessit\xE9 d\u2019accorder aux entit\xE9s financi\xE8res\
            \ suffisamment de temps pour obtenir des informations compl\xE8tes et\
            \ exactes."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-5
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 5
      description: Taking into account the criteria set out in Article 20, first paragraph,
        point (a), of Regulation (EU) 2022/2554, the reporting timelines should not
        pose a disproportionate burden to microenterprises and to other financial
        entities that are not significant. In addition, to avoid a disproportional
        burden on financial entities, the reporting time limits should take into account
        weekends and bank holidays.
      translations:
        fr:
          name: "Pr\xE9ambule 5"
          description: "Compte tenu des crit\xE8res \xE9nonc\xE9s \xE0 l\u2019article\
            \ 20, premier alin\xE9a, point a), du r\xE8glement (UE) 2022/2554, les\
            \ d\xE9lais de notification ne devraient pas repr\xE9senter une charge\
            \ disproportionn\xE9e pour les microentreprises et les autres entit\xE9\
            s financi\xE8res qui ne sont pas importantes. En outre, les d\xE9lais\
            \ de notification devraient tenir compte des weekends et jours f\xE9ri\xE9\
            s, afin d\u2019\xE9viter de faire supporter une charge disproportionn\xE9\
            e aux entit\xE9s financi\xE8res."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-6
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 6
      description: Since significant cyber threats are to be notified on a voluntary
        basis, the content of such notifications should not impose a burden on financial
        entities and should be more limited than the information requested for major
        ICT- related incidents.
      translations:
        fr:
          name: "Pr\xE9ambule 6"
          description: "\xC9tant donn\xE9 que les cybermenaces importantes doivent\
            \ \xEAtre notifi\xE9es sur une base volontaire, le contenu de ces notifications\
            \ ne devrait pas imposer de charge aux entit\xE9s financi\xE8res et devrait\
            \ \xEAtre plus limit\xE9 que les informations demand\xE9es pour les incidents\
            \ majeurs li\xE9s aux TIC."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-7
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 7
      description: This Regulation is based on the draft regulatory technical standards
        submitted to the Commission by the European Supervisory Authorities.
      translations:
        fr:
          name: "Pr\xE9ambule 7"
          description: "Le pr\xE9sent r\xE8glement se fonde sur le projet de normes\
            \ techniques de r\xE9glementation soumis \xE0 la Commission par les autorit\xE9\
            s europ\xE9ennes de surveillance."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-8
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 8
      description: The European Supervisory Authorities have conducted open public
        consultations on the draft regulatory technical standards on which this Regulation
        is based, analysed the potential related costs and benefits and requested
        the advice of the Stakeholders Groups established in accordance with Article
        37 of Regulations (EU) No 1093/2010 (3), (EU) No 1094/2010 (4) and (EU) No
        1095/2010 (5) of the European Parliament and of the Council.
      translations:
        fr:
          name: "Pr\xE9ambule 8"
          description: "Les autorit\xE9s europ\xE9ennes de surveillance ont proc\xE9\
            d\xE9 \xE0 des consultations publiques ouvertes sur les projets de normes\
            \ techniques de r\xE9glementation sur lesquels se fonde le pr\xE9sent\
            \ r\xE8glement, analys\xE9 les co\xFBts et avantages potentiels qu\u2019\
            ils impliquent et sollicit\xE9 l\u2019avis du groupe des parties int\xE9\
            ress\xE9es institu\xE9 en application de l\u2019article 37 des r\xE8glements\
            \ (UE) no 1093/2010 (3), (UE) no 1094/2010 (4) et (UE) no 1095/2010 (5)\
            \ du Parlement europ\xE9en et du Conseil."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recital-9
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:recitals
      name: Recital 9
      description: 'The European Data Protection Supervisor was consulted in accordance
        with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament
        and of the Council (6) and delivered a positive opinion on 22 July 2024. Any
        processing of personal data within the scope of this Regulation should be
        performed in accordance with the applicable data protection principles and
        provisions from Regulation (EU) 2018/1725, HAS ADOPTED THIS REGULATION:'
      translations:
        fr:
          name: "Pr\xE9ambule 9"
          description: "Le Contr\xF4leur europ\xE9en de la protection des donn\xE9\
            es a \xE9t\xE9 consult\xE9 conform\xE9ment \xE0 l\u2019article 42, paragraphe\
            \ 1, du r\xE8glement (UE) 2018/1725 du Parlement europ\xE9en et du Conseil\
            \ (6) et a rendu un avis positif le 22 juillet 2024. Tout traitement de\
            \ donn\xE9es \xE0 caract\xE8re personnel relevant du champ d\u2019application\
            \ du pr\xE9sent r\xE8glement devrait \xEAtre effectu\xE9 conform\xE9ment\
            \ aux principes applicables en mati\xE8re de protection des donn\xE9es\
            \ et aux dispositions du r\xE8glement (UE) 2018/1725."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1
      assessable: false
      depth: 1
      name: Article 1
      description: General information to be provided in initial notifications and
        intermediate and final reports on major ICT-related incidents
      translations:
        fr:
          name: Article premier
          description: "Informations g\xE9n\xE9rales \xE0 fournir dans les notifications\
            \ initiales et les rapports interm\xE9diaire et final sur les incidents\
            \ majeurs li\xE9s aux TIC"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1:1
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1
      description: 'Financial entities shall include in the initial notification,
        the intermediate report, and the final report, as referred to in Article 19(4)
        of Regulation (EU) 2022/2554, the following general information:'
      translations:
        fr:
          description: "Les entit\xE9s financi\xE8res incluent dans la notification\
            \ initiale, le rapport interm\xE9diaire et le rapport final, vis\xE9s\
            \ \xE0 l\u2019article 19, paragraphe 4, du r\xE8glement (UE) 2022/2554,\
            \ les informations g\xE9n\xE9rales suivantes:"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:1.a
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1:1
      ref_id: 1.a
      description: the type of submission (initial notification, intermediate report,
        or final report);
      translations:
        fr:
          description: "le type de soumission (notification initiale, rapport interm\xE9\
            diaire ou rapport final);"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:1.b
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1:1
      ref_id: 1.b
      description: the name of the financial entity, its LEI code, and the type of
        financial entity, as referred to in Article 2(1) of Regulation (EU) 2022/2554;
      translations:
        fr:
          description: "le nom de l\u2019entit\xE9 financi\xE8re, son code LEI et\
            \ le type d\u2019entit\xE9 financi\xE8re vis\xE9 \xE0 l\u2019article 2,\
            \ paragraphe 1, du r\xE8glement (UE) 2022/2554;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:1.c
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1:1
      ref_id: 1.c
      description: the name and identification code of the entity that submits the
        initial notification, or intermediate or final report, for the financial entity;
      translations:
        fr:
          description: "le nom et le code d\u2019identification de l\u2019entit\xE9\
            \ qui soumet la notification initiale, ou le rapport interm\xE9diaire\
            \ ou final, pour l\u2019entit\xE9 financi\xE8re;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:1.d
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1:1
      ref_id: 1.d
      description: where applicable, the names and LEI codes of all financial entities
        covered in the aggregated initial notification or intermediate or final report;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, les noms et codes LEI de toutes les\
            \ entit\xE9s financi\xE8res couvertes par la notification initiale agr\xE9\
            g\xE9e ou le rapport interm\xE9diaire ou final;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:1.e
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1:1
      ref_id: 1.e
      description: the contact details of the persons responsible for communicating
        with the competent authority on the major ICT- related incident;
      translations:
        fr:
          description: "les coordonn\xE9es des personnes charg\xE9es de communiquer\
            \ avec l\u2019autorit\xE9 comp\xE9tente au sujet de l\u2019incident majeur\
            \ li\xE9 aux TIC;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:1.f
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1:1
      ref_id: 1.f
      description: where applicable, the identification of the parent undertaking
        of the group to which the financial entity belongs;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, l\u2019identification de l\u2019entreprise\
            \ m\xE8re du groupe auquel l\u2019entit\xE9 financi\xE8re appartient;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:1.g
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-1:1
      ref_id: 1.g
      description: where there is monetary impact, the currency the amounts are based
        on.
      translations:
        fr:
          description: "en cas d\u2019incidence sur la situation mon\xE9taire, la\
            \ monnaie dans laquelle les montants sont calcul\xE9s."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2
      assessable: false
      depth: 1
      name: Article 2
      description: Specific information to be provided in initial notifications
      translations:
        fr:
          name: Article 2
          description: "Informations sp\xE9cifiques \xE0 fournir dans les notifications\
            \ initiales"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2
      description: 'Initial notifications as referred to in Article 19(4), point (a),
        of Regulation (EU) 2022/2554 shall contain at least all of the following specific
        information:'
      translations:
        fr:
          description: "Les notifications initiales vis\xE9es \xE0 l\u2019article\
            \ 19, paragraphe 4, point a), du r\xE8glement (UE) 2022/2554 contiennent\
            \ au moins toutes les informations sp\xE9cifiques suivantes:"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.a
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.a
      description: the incident reference code assigned by the financial entity;
      translations:
        fr:
          description: "le code de r\xE9f\xE9rence de l\u2019incident attribu\xE9\
            \ par l\u2019entit\xE9 financi\xE8re;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.b
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.b
      description: the date of detection, time of detection, and classification of
        the incident pursuant to Article 8 of Commission Delegated Regulation (EU)
        2024/1772 (7);
      translations:
        fr:
          description: "la date et l\u2019heure de d\xE9tection de l\u2019incident\
            \ et sa classification conform\xE9ment \xE0 l\u2019article 8 du r\xE8\
            glement d\xE9l\xE9gu\xE9 (UE) 2024/1772 de la Commission (7);"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.c
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.c
      description: a description of the ICT-related incident;
      translations:
        fr:
          description: "une description de l\u2019incident li\xE9 aux TIC;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.d
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.d
      description: the criteria, laid down in Articles 1 to 8 of Delegated Regulation
        (EU) 2024/1772, on the basis of which the financial entity classified the
        ICT-related incident as major;
      translations:
        fr:
          description: "les crit\xE8res \xE9nonc\xE9s aux articles 1er \xE0 8 du r\xE8\
            glement d\xE9l\xE9gu\xE9 (UE) 2024/1772, sur la base desquels l\u2019\
            entit\xE9 financi\xE8re a class\xE9 l\u2019incident li\xE9 aux TIC comme\
            \ majeur;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.e
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.e
      description: the Members States that are impacted by the ICT-related incident;
      translations:
        fr:
          description: "les \xC9tats membres touch\xE9s par l\u2019incident li\xE9\
            \ aux TIC;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.f
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.f
      description: information on how the ICT-related incident was discovered;
      translations:
        fr:
          description: "des informations sur la mani\xE8re dont l\u2019incident li\xE9\
            \ aux TIC a \xE9t\xE9 d\xE9tect\xE9;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.g
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.g
      description: where available, information about the origin of the ICT-related
        incident;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, des informations sur l\u2019origine\
            \ de l\u2019incident li\xE9 aux TIC;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.h
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.h
      description: information about whether the financial entity has activated a
        business continuity plan;
      translations:
        fr:
          description: "des informations indiquant si l\u2019entit\xE9 financi\xE8\
            re a activ\xE9 un plan de continuit\xE9 des activit\xE9s;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.i
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.i
      description: where applicable, information about the reclassification of the
        ICT-related incident from major to non-major;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, des informations sur le reclassement\
            \ de l\u2019incident li\xE9 aux TIC de majeur \xE0 non majeur;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:2.j
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-2:1
      ref_id: 2.j
      description: where available, any other relevant information.
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, toute autre information pertinente."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3
      assessable: false
      depth: 1
      name: Article 3
      description: Specific information to be provided in intermediate reports
      translations:
        fr:
          name: Article 3
          description: "Informations sp\xE9cifiques \xE0 fournir dans les rapports\
            \ interm\xE9diaires"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3
      description: 'Intermediate reports as referred to in Article 19(4), point (b),
        of Regulation (EU) 2022/2554 shall contain at least all of the following specific
        information:'
      translations:
        fr:
          description: "Les rapports interm\xE9diaires vis\xE9s \xE0 l\u2019article\
            \ 19, paragraphe 4, point b), du r\xE8glement (UE) 2022/2554 contiennent\
            \ au moins toutes les informations sp\xE9cifiques suivantes:"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.a
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.a
      description: where applicable, the incident reference code provided by the competent
        authority;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, le code de r\xE9f\xE9rence de l\u2019\
            incident attribu\xE9 par l\u2019autorit\xE9 comp\xE9tente;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.b
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.b
      description: the date and time of occurrence of the ICT-related incident;
      translations:
        fr:
          description: "la date et l\u2019heure auxquelles l\u2019incident li\xE9\
            \ aux TIC est survenu;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.c
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.c
      description: where applicable, the date and time when the financial entity has
        recovered its regular activities;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, la date et l\u2019heure auxquelles l\u2019\
            entit\xE9 financi\xE8re a repris ses activit\xE9s r\xE9guli\xE8res;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.d
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.d
      description: information about how the criteria laid down in Articles 1 to 8
        of Delegated Regulation (EU) 2024/1772 have been fulfilled, on the basis of
        which the financial entity classified the ITC-related incident as major;
      translations:
        fr:
          description: "des informations sur la mani\xE8re dont les crit\xE8res \xE9\
            nonc\xE9s aux articles 1er \xE0 8 du r\xE8glement d\xE9l\xE9gu\xE9 (UE)\
            \ 2024/1772 ont \xE9t\xE9 remplis, sur la base desquels l\u2019entit\xE9\
            \ financi\xE8re a class\xE9 l\u2019incident li\xE9 aux TIC comme majeur;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.e
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.e
      description: the type of ICT-related incident;
      translations:
        fr:
          description: "le type d\u2019incident li\xE9 aux TIC;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.f
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.f
      description: where applicable, the threats and techniques used by the threat
        actor;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, les menaces et les techniques utilis\xE9\
            es par l\u2019acteur de la menace;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.g
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.g
      description: affected functional areas and business processes;
      translations:
        fr:
          description: "les domaines fonctionnels et les processus op\xE9rationnels\
            \ concern\xE9s;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.h
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.h
      description: affected infrastructure components supporting business processes;
      translations:
        fr:
          description: "les composants d\u2019infrastructure concern\xE9s soutenant\
            \ les processus op\xE9rationnels;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.i
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.i
      description: impact on the financial interest of clients;
      translations:
        fr:
          description: "l\u2019incidence sur les int\xE9r\xEAts financiers des clients;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.j
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.j
      description: information about reporting about the ICT-related incident to other
        authorities;
      translations:
        fr:
          description: "des informations sur la notification de l\u2019incident li\xE9\
            \ aux TIC \xE0 d\u2019autres autorit\xE9s;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.k
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.k
      description: temporary actions or measures taken or planned to be taken by the
        financial entity to recover from the ICT-related incident;
      translations:
        fr:
          description: "les actions ou mesures temporaires prises ou pr\xE9vues par\
            \ l\u2019entit\xE9 financi\xE8re pour se r\xE9tablir \xE0 la suite de\
            \ l\u2019incident li\xE9 aux TIC;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:3.l
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-3:1
      ref_id: 3.l
      description: where applicable, information on indicators of compromise.
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, des informations sur les indicateurs\
            \ de compromis."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4
      assessable: false
      depth: 1
      name: Article 4
      description: Article Specific information to be provided in final reports
      translations:
        fr:
          name: Article 4
          description: "Informations sp\xE9cifiques \xE0 fournir dans les rapports\
            \ finaux"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4:1
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4
      description: 'Final reports as referred to in Article 19(4), point (c), of Regulation
        (EU) 2022/2554 shall contain all of the following specific information:'
      translations:
        fr:
          description: "Les rapports finaux vis\xE9s \xE0 l\u2019article 19, paragraphe\
            \ 4, point c), du r\xE8glement (UE) 2022/2554 contiennent toutes les informations\
            \ sp\xE9cifiques suivantes:"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:4.a
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4:1
      ref_id: 4.a
      description: information about the root causes of the ICT-related incident;
      translations:
        fr:
          description: "des informations sur les causes originelles de l\u2019incident\
            \ li\xE9 aux TIC;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:4.b
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4:1
      ref_id: 4.b
      description: dates and times when the ICT-related incident was resolved and
        the root cause(s) addressed;
      translations:
        fr:
          description: "les dates et heures auxquelles l\u2019incident li\xE9 aux\
            \ TIC a \xE9t\xE9 r\xE9solu et la ou les causes originelles ont \xE9t\xE9\
            \ trait\xE9es;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:4.c
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4:1
      ref_id: 4.c
      description: information on the resolution of the ICT-related incident;
      translations:
        fr:
          description: "des informations sur la r\xE9solution de l\u2019incident li\xE9\
            \ aux TIC;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:4.d
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4:1
      ref_id: 4.d
      description: where applicable, information relevant for resolution authorities;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, les informations pertinentes pour les\
            \ autorit\xE9s de r\xE9solution;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:4.e
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4:1
      ref_id: 4.e
      description: information about direct and indirect costs and losses stemming
        from the ICT-related incident and information about financial recoveries;
      translations:
        fr:
          description: "des informations sur les co\xFBts et pertes directs et indirects\
            \ d\xE9coulant de l\u2019incident li\xE9 aux TIC et des informations sur\
            \ les recouvrements financiers;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:4.f
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-4:1
      ref_id: 4.f
      description: where applicable, information about recurring ICT-related incidents.
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, des informations sur les incidents r\xE9\
            currents li\xE9s aux TIC."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-5
      assessable: false
      depth: 1
      name: Article 5
      description: Time limits for the initial notification, and for the intermediate
        and final reports
      translations:
        fr:
          name: Article 5
          description: "D\xE9lais pour la notification initiale et pour les rapports\
            \ interm\xE9diaire et final"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.1
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-5
      ref_id: '5.1'
      description: 'Financial entities shall submit the initial notification and the
        intermediate and final reports as referred to in Article 19(4), points (a),
        (b) and (c), of Regulation (EU) 2022/2554 within the following time limits:'
      translations:
        fr:
          description: "Les entit\xE9s financi\xE8res soumettent la notification initiale\
            \ et les rapports interm\xE9diaire et final vis\xE9s \xE0 l\u2019article\
            \ 19, paragraphe 4, points a), b) et c), du r\xE8glement (UE) 2022/2554\
            \ dans les d\xE9lais suivants:"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.1.a
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.1
      ref_id: 5.1.a
      description: 'for the initial report: as early as possible, but in any case,
        within four hours from the classification of the ICT-related incident as a
        major ICT-related incident and no later than 24 hours from the moment the
        financial entity has become aware of the ICT-related incident;'
      translations:
        fr:
          description: "pour le rapport initial: le plus t\xF4t possible, mais en\
            \ tout \xE9tat de cause, dans un d\xE9lai de quatre heures \xE0 compter\
            \ de la classification de l\u2019incident li\xE9 aux TIC comme majeur\
            \ et au plus tard 24 heures \xE0 compter du moment o\xF9 l\u2019entit\xE9\
            \ financi\xE8re en a eu connaissance;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.1.b
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.1
      ref_id: 5.1.b
      description: 'for the intermediate report: at the latest within 72 hours from
        the submission of the initial notification, even where the status or the handling
        of the incident have not changed as referred to in Article 19(4), point (b),
        of Regulation (EU) 2022/2554. Financial entities shall submit an updated intermediate
        report without undue delay, and in any case when the regular activities have
        been recovered;'
      translations:
        fr:
          description: "pour le rapport interm\xE9diaire: au plus tard dans un d\xE9\
            lai de 72 heures \xE0 compter de la soumission de la notification initiale,\
            \ m\xEAme si la situation ou le traitement de l\u2019incident n\u2019\
            ont pas chang\xE9 conform\xE9ment \xE0 l\u2019article 19, paragraphe 4,\
            \ point b), du r\xE8glement (UE) 2022/2554. Les entit\xE9s financi\xE8\
            res soumettent sans retard injustifi\xE9 un rapport interm\xE9diaire actualis\xE9\
            \ et, en tout \xE9tat de cause, lorsque les activit\xE9s r\xE9guli\xE8\
            res ont repris;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.1.c
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.1
      ref_id: 5.1.c
      description: 'for the final report: no later than one month after either the
        submission of the intermediate report, or, where applicable, after the latest
        updated intermediate report.'
      translations:
        fr:
          description: "pour le rapport final: au plus tard un mois apr\xE8s la soumission\
            \ du rapport interm\xE9diaire ou, le cas \xE9ch\xE9ant, apr\xE8s la derni\xE8\
            re mise \xE0 jour du rapport interm\xE9diaire."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.2
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-5
      ref_id: '5.2'
      description: Where the financial entity has not classified an ICT-related incident
        as major within 24 hours from the moment the financial entity has become aware
        of the ITC-related incident but classifies that ICT-related incident as major
        at a later stage, the financial entity shall submit the initial notification
        within four hours from the classification of the ICT-related incident as a
        major incident.
      translations:
        fr:
          description: "Lorsque l\u2019entit\xE9 financi\xE8re n\u2019a pas class\xE9\
            \ un incident li\xE9 aux TIC comme majeur dans un d\xE9lai de 24 heures\
            \ \xE0 compter du moment o\xF9 elle en a eu connaissance, mais qu\u2019\
            elle classe cet incident comme majeur \xE0 un stade ult\xE9rieur, elle\
            \ soumet la notification initiale dans un d\xE9lai de quatre heures \xE0\
            \ compter de la classification de l\u2019incident li\xE9 aux TIC comme\
            \ majeur."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.3
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-5
      ref_id: '5.3'
      description: Financial entities that are unable to submit the initial notification,
        intermediate report, or final report within the time limits set out in paragraph
        1, shall inform the competent authority thereof without undue delay, but no
        later than the respective time limits for the submission of the notification
        or report, and shall explain the reasons for the delay.
      translations:
        fr:
          description: "Les entit\xE9s financi\xE8res qui ne sont pas en mesure de\
            \ soumettre la notification initiale, le rapport interm\xE9diaire ou le\
            \ rapport final dans les d\xE9lais fix\xE9s au paragraphe 1 en informent\
            \ l\u2019autorit\xE9 comp\xE9tente dans les meilleurs d\xE9lais, mais\
            \ au plus tard dans les d\xE9lais respectifs pour la soumission de la\
            \ notification ou du rapport, et en expliquent les raisons."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.4
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-5
      ref_id: '5.4'
      description: Where the time limit for the submission of an initial notification,
        intermediate report, or a final report falls on a weekend day or a bank holiday
        in the Member State of the reporting financial entity, the financial entity
        may submit the initial notification, intermediate or final reports by noon
        of the next working day.
      translations:
        fr:
          description: "Lorsque le d\xE9lai de soumission d\u2019une notification\
            \ initiale, d\u2019un rapport interm\xE9diaire ou d\u2019un rapport final\
            \ expire un jour de week-end ou un jour f\xE9ri\xE9 dans l\u2019\xC9tat\
            \ membre de l\u2019entit\xE9 financi\xE8re d\xE9clarante, l\u2019entit\xE9\
            \ financi\xE8re peut soumettre la notification initiale, le rapport interm\xE9\
            diaire ou le rapport final au plus tard \xE0 midi le jour ouvrable suivant."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.5
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-5
      ref_id: '5.5'
      description: Paragraph 4 shall not apply for the submission of an initial notification
        or an intermediate report by credit institutions, central counterparties,
        operators of trading venues, and other financial entities identified as essential
        or important entities pursuant to Article 3 of Directive (EU) 2022/2555.
      translations:
        fr:
          description: "Le paragraphe 4 ne s\u2019applique pas \xE0 la soumission\
            \ d\u2019une notification initiale ou d\u2019un rapport interm\xE9diaire\
            \ par les \xE9tablissements de cr\xE9dit, les contreparties centrales,\
            \ les op\xE9rateurs de plates-formes de n\xE9gociation et d\u2019autres\
            \ entit\xE9s financi\xE8res consid\xE9r\xE9es comme des entit\xE9s essentielles\
            \ ou importantes conform\xE9ment \xE0 l\u2019article 3 de la directive\
            \ (UE) 2022/2555."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:5.6
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-5
      ref_id: '5.6'
      description: Competent authorities may decide that paragraph 4 shall not apply
        for the submission of an initial notification or an intermediate report by
        financial entities, other than those referred to in paragraph 5, which are
        significant or have a systemic character for the financial sector at national
        or Union level. Competent authorities shall notify their decision to the identified
        financial entities. The decision of the competent authority shall only apply
        in respect of incidents reported after the date of notification of the decision
        by the competent authority to the identified financial entities.
      translations:
        fr:
          description: "Les autorit\xE9s comp\xE9tentes peuvent d\xE9cider que le\
            \ paragraphe 4 ne s\u2019applique pas \xE0 la soumission d\u2019une notification\
            \ initiale ou d\u2019un rapport interm\xE9diaire par les entit\xE9s financi\xE8\
            res, autres que celles vis\xE9es au paragraphe 5, qui sont class\xE9es\
            \ comme importantes ou pr\xE9sentent un caract\xE8re syst\xE9mique pour\
            \ le secteur financier au niveau national ou de l\u2019Union. Les autorit\xE9\
            s comp\xE9tentes notifient leur d\xE9cision aux entit\xE9s financi\xE8\
            res concern\xE9es. La d\xE9cision de l\u2019autorit\xE9 comp\xE9tente\
            \ ne s\u2019applique qu\u2019en ce qui concerne les incidents d\xE9clar\xE9\
            s apr\xE8s la date de la notification de la d\xE9cision par l\u2019autorit\xE9\
            \ comp\xE9tente aux entit\xE9s financi\xE8res concern\xE9es."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6
      assessable: false
      depth: 1
      name: Article 6
      description: Content of the voluntary notification of significant cyber threats
      translations:
        fr:
          name: Article 6
          description: Contenu de la notification volontaire des cybermenaces importantes
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      assessable: true
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6
      description: 'The content of the voluntary notification in relation to significant
        cyber threats as referred to in Article 19(2) of Regulation (EU) 2022/2554
        shall cover all of the following:'
      translations:
        fr:
          description: "Le contenu de la notification volontaire en ce qui concerne\
            \ les cybermenaces importantes vis\xE9e \xE0 l\u2019article 19, paragraphe\
            \ 2, du r\xE8glement (UE) 2022/2554 couvre l\u2019ensemble des \xE9l\xE9\
            ments suivants:"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.a
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.a
      description: general information about the notifying financial entity as set
        out in Article 1;
      translations:
        fr:
          description: "des informations g\xE9n\xE9rales sur l\u2019entit\xE9 financi\xE8\
            re notifiante, conform\xE9ment \xE0 l\u2019article 1er;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.b
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.b
      description: the date and time of detection of the significant cyber threat
        and any other relevant timestamps related to the significant cyber threat;
      translations:
        fr:
          description: "la date et l\u2019heure de d\xE9tection de la cybermenace\
            \ importante et de tout autre horodatage pertinent li\xE9 \xE0 cette derni\xE8\
            re;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.c
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.c
      description: a description of the significant cyber threat;
      translations:
        fr:
          description: une description de la cybermenace importante;
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.d
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.d
      description: information about the potential impact of the significant cyber
        threat on the financial entity, its clients, or financial counterparts;
      translations:
        fr:
          description: "des informations sur l\u2019incidence potentielle de la cybermenace\
            \ importante sur l\u2019entit\xE9 financi\xE8re, ses clients ou ses contreparties\
            \ financi\xE8res;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.e
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.e
      description: the classification criteria that would have triggered a major incident
        report laid down in Articles 1 to 8 of Delegated Regulation (EU) 2024/1772
        if the cyber threat had materialised;
      translations:
        fr:
          description: "les crit\xE8res de classification susceptibles d\u2019avoir\
            \ \xE9t\xE9 \xE0 l\u2019origine d\u2019un rapport d\u2019incident majeur\
            \ pr\xE9vus aux articles 1er \xE0 8 du r\xE8glement d\xE9l\xE9gu\xE9 (UE)\
            \ 2024/1772 en cas de mat\xE9rialisation de la cybermenace;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.f
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.f
      description: information about the status of the significant cyber threat and
        any changes in the threat activity;
      translations:
        fr:
          description: "des informations sur la situation de la cybermenace importante\
            \ et sur tout changement dans l\u2019activit\xE9 de la menace;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.g
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.g
      description: where applicable, a description of the actions taken by the financial
        entity to prevent the materialisation of the significant cyber threats;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, une description des mesures prises par\
            \ l\u2019entit\xE9 financi\xE8re pour emp\xEAcher la mat\xE9rialisation\
            \ des cybermenaces importantes;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.h
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.h
      description: information about any notification of the significant cyber threat
        to other financial entities or authorities;
      translations:
        fr:
          description: "des informations sur toute notification de la cybermenace\
            \ importante \xE0 d\u2019autres entit\xE9s ou autorit\xE9s financi\xE8\
            res;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.i
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.i
      description: where applicable, information on indicators of compromise;
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, des informations sur les indicateurs\
            \ de compromis;"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:6.j
      assessable: true
      depth: 3
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-6:1
      ref_id: 6.j
      description: where available, any other relevant information.
      translations:
        fr:
          description: "le cas \xE9ch\xE9ant, toute autre information pertinente."
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-7
      assessable: false
      depth: 1
      name: Article 7
      description: Entry into force
      translations:
        fr:
          name: Article 7
          description: "Entr\xE9e en vigueur"
    - urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-7:1
      assessable: false
      depth: 2
      parent_urn: urn:intuitem:risk:req_node:rts-dora-incident-reporting_official:article-7
      description: 'This Regulation shall enter into force on the twentieth day following
        that of its publication in the Official Journal of the European Union.

        This Regulation shall be binding in its entirety and directly applicable in
        all Member States.'
      translations:
        fr:
          description: "Le pr\xE9sent r\xE8glement entre en vigueur le vingti\xE8\
            me jour suivant celui de sa publication au Journal officiel de l\u2019\
            Union europ\xE9enne.\nLe pr\xE9sent r\xE8glement est obligatoire dans\
            \ tous ses \xE9l\xE9ments et directement applicable dans tout \xC9tat\
            \ membre."
