Overview
Classify ICT-related incidents, assess cyber threats and prepare the reports and notifications to Finansinspektionen under DORA.
Everything you enter is stored only in this browser. Nothing is saved on the server. Use Export data to keep a backup or to move your incidents to another computer.
Start with your settings
Enter your entity, contact details and type of financial entity once. They are used to pre-fill every report and to calculate deadlines correctly.
Incidents
0| Reference | Title | Detected | Classification | Next deadline | Reports |
|---|
No incidents yet. Use New incident to register one, or classify an incident directly.
Cyber threats
0| Reference | Title | Detected | Status | Assessment |
|---|
No cyber threats registered.
How it works
- Classify the incident against the criteria in CDR (EU) 2024/1772. If it is major, record when it was classified.
- Follow the deadlines: initial notification within 4 hours of classification (at most 24 hours after detection), intermediate report within 72 hours, final report within one month.
- Fill in the report. Settings and incident data are pre-filled; the server validates the report against the ESA JSON schema.
- Download the JSON and upload it to Finansinspektionen's reporting portal. Then record the submission time on the incident.
See Help for the regulatory details.