GL Estimation of aggregated costs

This is a placeholder-page for the full legal text of the regulatory technical standard (RTS) on estimation of aggregated costs, supplementing DORA. It was submitted by the ESAs to the European Commission in July 2024 as mandated by Article 11(11) of DORA. It is expected to become applicable on 17 January 2025 along with DORA.

Until we publish the full legal text here, please find the final draft on EBA's web page.

The RTS on estimation of aggregated costs aims to standardize the estimation of aggregated annual costs and losses arising from major ICT-related incidents, aligning with the requirements of Regulation 2022/2554 (DORA). It seeks to ensure consistency and comparability across incident reporting mandates, minimizing reporting burdens for financial entities by applying proportional criteria for incident classification.