This regulation supplements Regulation (EU) 2022/2554, introducing regulatory technical standards. These standards specify the required content and time limits for the initial notification, as well as intermediate and final reports, concerning major ICT-related incidents. Furthermore, the regulation defines the content for voluntary notifications of significant cyber threats.
New EU Regulation 2025/301 on ICT Incident Reporting and Cyber Threats
This regulation supplements Regulation (EU) 2022/2554, introducing regulatory technical standards. These standards specify the required content and time limits for the initial notification, as well as intermediate and final reports, concerning major ICT-related incidents. Furthermore, the regulation defines the content for voluntary notifications of significant cyber threats.
