OtherEuropean Union
DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301)
What is DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301)?
DORA Level 2 regulatory technical standards on what the initial notification, intermediate report and final report of a major ICT-related incident must contain, their deadlines (four hours from classification and 24 hours from awareness, 72 hours, one month) and the content of voluntary cyber threat notifications. It comprises 8 controls organised across 3 domains, and applies in the European Union.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) overlaps with the standards you already hold
DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) vs ISO 27001:2022View comparison →DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) vs SOC 2View comparison →DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) vs NIST CSF 2.0View comparison →DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) vs GDPRView comparison →DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) vs HIPAAView comparison →DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) vs PCI DSS 4.0View comparison →
What DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) means in your sector
DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Healthcare→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Financial Services→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Technology→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Government→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Manufacturing→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Energy→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Retail→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Education→
What DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) means for your job
DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for CISOs→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Compliance Officers→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Risk Managers→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for IT Directors→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for DPOs→DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) for Auditors→
Questions people ask about DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301)
What is DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301)?
DORA Level 2 regulatory technical standards on what the initial notification, intermediate report and final report of a major ICT-related incident must contain, their deadlines (four hours from classification and 24 hours from awareness, 72 hours, one month) and the content of voluntary cyber threat notifications.
How many controls does DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) have?
DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) contains 8 controls organized across 3 domains.
Where does DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) apply?
DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) applies in European Union. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) is covered here?
This page covers OJ L 2025/301 of 20 February 2025.
Query DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) programmatically
DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301), its 8 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) API reference and MCP config →How ready are you for DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .