Commission Delegated Regulation EU 2024/1772

DORA Incident Classification in 60 Seconds

Instantly triage system outages against European Supervisory Authorities thresholds. Determine if infrastructure failures require a mandatory four-hour regulatory report.

4h initial notification windowArt. 8–9, Reg. 2024/1772Real-time evaluation

Regulatory basis:DORA — Reg. (EU) 2022/2554 RTS Classification — Reg. (EU) 2024/1772 RTS Reporting — Reg. (EU) 2025/301

Security Context

Data Integrity Impacted

Records altered, corrupted or lost beyond recoverable state.

Result of Malicious Cyberattack

Confirmed adversarial action (ransomware, intrusion, exfiltration).

Reputational Impact

Relevant media coverage, significant volume of client complaints, or proactive contact from a competent authority.

Art. 9(2), Reg. 2024/1772

Impact MetricsArt. 9(1)

Clients impacted (% of client base)

threshold > 10%2%

Unique affected usersMAJOR threshold: > 100,000

EU member states impacted

threshold ≥ 2Art. 9(4)1

TimeframesArt. 9(3)

CIF downtime (hours)MAJOR threshold: > 2 h

Overall incident duration (hours)MAJOR threshold: > 24 h

Business ImpactArt. 9(6)

Direct economic loss (EUR)MAJOR threshold: > €100,000

Affects a critical or important function (CIF) / critical TPP

When active, a single threshold breach is sufficient for MAJOR classification under Art. 8(1)(a).

Art. 8, Reg. 2024/1772

Live ClassificationArt. 8, Reg. 2024/1772

MINOR INCIDENT

Internal logging required. No regulatory notification mandated.

Threshold breakdownArt. 9

0 of 6 metric thresholds breached

Clients impacted > 10% or > 100,000 usersArt. 9(1), Reg. 2024/1772
Reputational impactArt. 9(2), Reg. 2024/1772
CIF downtime > 2h or overall duration > 24hArt. 9(3), Reg. 2024/1772
Geographical spread ≥ 2 member statesArt. 9(4), Reg. 2024/1772
Data integrity lossArt. 9(5), Reg. 2024/1772
Direct economic loss > €100,000Art. 9(6), Reg. 2024/1772

Export Triage Audit Record

Generate a timestamped PDF documenting exactly why this incident was classified as MINOR INCIDENT against the Art. 8–9 thresholds of Reg. (EU) 2024/1772. Structured to mirror the field layout of the official ITS template (Reg. 2025/302, Annex I).