Auf die Warteliste

Statistik › Intraday und Marktmikrostruktur › Incident rules

A European financial firm must notify a major technology incident within four hours of classifying it, and two materiality thresholds are enough to make it major

Materiality thresholdZahl
Clients affected, relativemore than 10 per cent of all clients using the affected service
Clients affected, absolutemore than 100,000
Financial counterparts affectedmore than 30 per cent
Transactions affected, numbermore than 10 per cent of the daily average number
Transactions affected, valuemore than 10 per cent of the daily average value
Durationmore than 24 hours
Service downtime on a critical or important functionmore than 2 hours
Geographical spreadimpact in two or more member states
Costs and lossesexceeded or likely to exceed 100,000 euro
Data losses and reputational impactno numeric threshold

Commission Delegated Regulation (EU) 2024/1772, all of these in Article 9. The classification rule in Article 8(1) requires that the incident affected critical services and that it either met the costs and losses limb or met two or more of the other thresholds.

The nine thresholds include a hundred thousand clients, two hours of downtime on a critical function and a hundred thousand euro of cost. Two of them together, plus an effect on critical services, triggers the whole reporting chain.

4 hoursInitial notification deadline
24 hoursOuter limit from awareness
2Thresholds needed to classify as major
2 hoursDowntime threshold on a critical function

Nur für Mitglieder

Der restliche Teil dieser Seite ist für Mitglieder

Below this point there are 6 sections, 1 table and 5 named sources, roughly 700 words of it. Every figure carries the source it came from and the date the data is from.

Sie können weiterhin jede Statistik in der Bibliothek kostenlos durchsehen. Die Einleitung und die Zusammenfassung sind immer offen.