Specific information to be provided in initial notifications
Article 2
Initial notifications as referred to in Article 19(4), point (a), of Regulation (EU) 2022/2554 shall contain at least all of the following specific information: (a) the incident reference code assigned by the financial entity; (b) the date of detection, time of detection, and classification of the incident pursuant to Article 8 of Commission Delegated Regulation (EU) 2024/1772 ( 7 ) ; (c) a description of the ICT-related incident; (d) the criteria, laid down in Articles 1 to 8 of Delegated Regulation (EU) 2024/1772, on the basis of which the financial entity classified the ICT-related incident as major; (e) the Members States that are impacted by the ICT-related incident; (f) information on how the ICT-related incident was discovered; (g) where available, information about the origin of the ICT-related incident; (h) information about whether the financial entity has activated a business continuity plan; (i) where applicable, information about the reclassification of the ICT-related incident from major to non-major; (j) where available, any other relevant information.