Report on the feasibility for further centralisation of reporting of major ICT-related incidents : Article 21 of REGULATION (EU) 2022/2554

<?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.loc.gov/MARC21/slim http://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd">
  <record>
    <leader>00000cam a22000004b 4500</leader>
    <controlfield tag="001">MAP20250000933</controlfield>
    <controlfield tag="003">MAP</controlfield>
    <controlfield tag="005">20250401093119.0</controlfield>
    <controlfield tag="008">230921s2024    deu||||       ||| ||eng d</controlfield>
    <datafield tag="040" ind1=" " ind2=" ">
      <subfield code="a">MAP</subfield>
      <subfield code="b">spa</subfield>
      <subfield code="d">MAP</subfield>
    </datafield>
    <datafield tag="084" ind1=" " ind2=" ">
      <subfield code="a">921.9</subfield>
    </datafield>
    <datafield tag="240" ind1="0" ind2="0">
      <subfield code="a">JC 2024 65</subfield>
    </datafield>
    <datafield tag="245" ind1="1" ind2="0">
      <subfield code="a">Report on the feasibility for further centralisation of reporting of major ICT-related incidents</subfield>
      <subfield code="b">: Article 21 of REGULATION (EU) 2022/2554</subfield>
    </datafield>
    <datafield tag="260" ind1=" " ind2=" ">
      <subfield code="a">Frankfurt</subfield>
      <subfield code="b">Joint Comittee of the European Supervisory Authorities</subfield>
      <subfield code="c">2024</subfield>
    </datafield>
    <datafield tag="300" ind1=" " ind2=" ">
      <subfield code="a">115 p.</subfield>
    </datafield>
    <datafield tag="520" ind1=" " ind2=" ">
      <subfield code="a">The report on the feasibility of further centralizing the reporting of major ICT-related incidents under DORA explores the potential benefits, limitations, and risks of establishing a single EU Hub for incident reporting. It examines the current decentralized system, where financial entities report incidents to national competent authorities, and compares it with two centralization scenarios: a Data Sharing model and a fully Centralized Hub. The report highlights the technical, legal, and operational prerequisites for each scenario, as well as the potential cost implications. It concludes that while all three scenarios are technically feasible, the fully Centralized Hub offers the greatest benefits in terms of standardization, data quality, and operational efficiency, despite the higher initial implementation costs and the need for robust security measures to mitigate the risks associated with data concentration. The report also emphasizes the importance of further analysis and stakeholder consultation to ensure a smooth transition and effective implementation</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2="4">
      <subfield code="0">MAPA20240022341</subfield>
      <subfield code="a">Reglamento DORA</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2="4">
      <subfield code="0">MAPA20080551926</subfield>
      <subfield code="a">Normativa</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2="4">
      <subfield code="0">MAPA20080594763</subfield>
      <subfield code="a">Armonización europea</subfield>
    </datafield>
    <datafield tag="650" ind1=" " ind2="4">
      <subfield code="0">MAPA20080588953</subfield>
      <subfield code="a">Análisis de riesgos</subfield>
    </datafield>
    <datafield tag="651" ind1=" " ind2="1">
      <subfield code="0">MAPA20080640255</subfield>
      <subfield code="a">Unión Europea</subfield>
    </datafield>
    <datafield tag="710" ind1="2" ind2=" ">
      <subfield code="0">MAPA20140023578</subfield>
      <subfield code="a">Joint Committee of the European Supervisory Authorities</subfield>
    </datafield>
    <datafield tag="710" ind1="2" ind2=" ">
      <subfield code="0">MAPA20110000219</subfield>
      <subfield code="a">EIOPA</subfield>
    </datafield>
    <datafield tag="710" ind1="2" ind2=" ">
      <subfield code="0">MAPA20150000507</subfield>
      <subfield code="a">European Securities and Markets Authority</subfield>
    </datafield>
    <datafield tag="710" ind1="2" ind2=" ">
      <subfield code="0">MAPA20150000514</subfield>
      <subfield code="a">European Banking Authority</subfield>
    </datafield>
    <datafield tag="856" ind1=" " ind2=" ">
      <subfield code="u">https://www.esma.europa.eu/sites/default/files/2025-01/JC_2024_108_Report_on_the_feasibility_for_further_Centralisation_of_reporting_of_major_ICT_incidents.pdf</subfield>
    </datafield>
  </record>
</collection>