Source: OJ L, 2025/301, 20.2.2025
ENRecital 6 Reporting significant cyber threats
Since significant cyber threats means a cyber threat which, based on its technical characteristics, can be assumed to have the potential to have a severe impact on the network and information systems of an entity or the users of the entity’s services by causing considerable material or non-material damage; are to be notified on a voluntary basis, the content of such notifications should not impose a burden on financial entitiesas defined in Article 2, points (a) to (t) and should be more limited than the information requested for major ICT-related incidents means an ICT-related incident that has a high adverse impact on the network and information systems that support critical or important functions of the financial entity;.