Help: Getting started

Getting started

This app helps a financial entity classify ICT-related incidents and assess cyber threats under DORA, and prepare the reports and notifications to Finansinspektionen (FI). It is free to use and needs no login. Everything you enter is stored only in your browser.

Regulatory basis: Regulation (EU) 2022/2554 (DORA) Articles 18 and 19, Commission Delegated Regulation (EU) 2024/1772 (classification criteria and materiality thresholds), Commission Delegated Regulation (EU) 2025/301 (content and time limits of the reports) and Commission Implementing Regulation (EU) 2025/302 (standard forms).

Before you start

Open Settings and enter the details of your financial entity: name, LEI, FI institution number, type of entity, contacts, report currency and home Member State. They pre-fill every report, and the type of entity decides whether the weekend relief applies to your deadlines.

Workflow

  1. Register the incident under New incident with a reference code, title and the time it was detected. The detection time starts the 24-hour clock.
  2. Classify it with the questionnaire. When the incident is major, save the result to the incident; the classification time starts the 4-hour clock.
  3. Follow the deadlines on the incident page or under Deadlines.
  4. Create the initial notification. The form is pre-filled from your settings and the incident. Check every value, complete the remaining fields and press Download JSON. The server validates the report against the ESA JSON schema first.
  5. Upload the JSON in FI's reporting portal. The app does not submit anything to FI.
  6. Record the submission on the incident, together with FI's reference code. This starts the 72-hour clock for the intermediate report.
  7. Intermediate report: pre-filled from the initial notification. Submit it and record the submission; this starts the one-month clock for the final report. Submit an updated intermediate report when the situation changes materially or regular activities have been recovered.
  8. Final report: pre-filled from the intermediate report and the resolution time. Submit it and record the submission.

Your data

  • Incidents, classifications, report drafts, cyber threats and settings are kept in your browser's local storage. They are not saved on the server.
  • Use Export data on the overview to make a backup or move your data to another computer, and Import data to restore it. Importing replaces the data in this browser.
  • Clearing the browser data, or using a private window, removes everything.

Help topics