Read the CySEC Circular C784

Memo #34-2026
CySEC Circular No: C784
Date: 10/03/2026

Subject: Digital Operational Resilience Act - updated reporting templates for: (a) Major ICT-related Incident (b) Significant Cyber Threats
Purpose: To inform Regulated Entities that a number of templates under the Digital Operational Resilience Act ('the DORA') have been updated.

In Summary:

CySEC has issued the Circular C784 on 10/06/2026 to inform the Cyprus Investment Firms ('CIFs'), Central Securities Depositories, Trading Venues, Crypto-Asset Providers (CASPs), Alternative Investment Fund Managers ('AIFMs') and UCITS Management Companies ('UCITS'), that two templates under the Digital Operational Resilience Act ('the DORA') have been updated.

Specific, the templates that have been updated are the:

a) Major ICT-related incidents and  
b) Significant cyber threats. 
 
CySEC informs that these updates relate to the release of Version 1.3 (the ‘V1.3’) of the DORA Incident Reporting Technical Package by the European Supervisory Authorities ('ESAs'). 
 
It is noted that Regulated Entities, currently using the V1.2 Excel templates, are required to transition to the V1.3 Excel templates for submissions on and after the date of this Circular.

The Circular C784 also includes information regarding the mandatory reporting of Major ICT-Related Incident Reporting Template and the voluntary reporting of Significant Cyber Threats Template that Regulated Entities must pay attention.

CySEC notes that all Regulated Entities are required to transition to the V1.3 templates from the date of this Circular and to ensure timely and accurate submission of the required reporting templates.
 
The updated Version 1.3 Excel templates can be found on the following link: https://www.cysec.gov.cy/en-GB/legislation/resilience/digital-resilience-dora/

The Digital Operational Resilience Act ('the DORA') can be found on the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022R2554

Read the CySEC Circular C784

Read more news at Regulatory News

{* *}