EUFinalFinal

EU Hub Incident Reporting Feasibility Report

Report on the feasibility for further centralisation of reporting of major ICT-related incidents (Article 21 of Regulation (EU) 2022/2554)

European Supervisory Authorities (EBA, ESMA, EIOPA) – Joint Committee

Updated Jan 1, 1

vFinal

Abstract

Joint feasibility study prepared by the European Supervisory Authorities assessing options for further centralisation of major ICT-related incident reporting under the Digital Operational Resilience Act (DORA), including baseline, data-sharing, and fully centralised EU Hub scenarios, together with analysis of technical, operational, legal, and cost considerations.

Key Takeaways

✓
Assesses feasibility of further centralising ICT incident reporting under Article 21 of DORA, including potential establishment of a single EU Hub.
✓
Evaluates three scenarios: baseline decentralised reporting, data-sharing model, and fully centralised EU Hub.
✓
Identifies potential benefits such as simplified reporting, improved cross-border coordination, and enhanced analytical capabilities.
✓
Highlights risks including concentration of sensitive data, governance complexity, and interoperability challenges.
✓
Concludes that further centralisation is feasible but requires additional legal basis, technical design work, and cost-benefit evaluation.

Keywords

DORAArticle 21ICT incident reportingEU HubcentralisationESAs Joint Committeefinancial sector resilience

Need DORA-Aligned AI Architecture?

We build AI systems that satisfy DORA requirements from day one. Audit trails, governance, exit readiness - built in, not bolted on.

Schedule Architecture Reviewviktor@intellectumlab.com | Response within 24 hours