Critical ICT incident reporting
What this control requires
All major ICT incidents impacting payment services, customer data or availability must be classified within 4 hours and reported under DORA timelines including initial, intermediate and final reports.
Other NBB Circular controls
BE_NBB_CIRCULAR_2012_11-CTRL-001 - Daily safeguarding reconciliationBE_NBB_CIRCULAR_2012_11-CTRL-003 - GDPR breach notification workflowBE_NBB_CIRCULAR_2012_11-CTRL-004 - AML suspicious transaction monitoringBE_NBB_CIRCULAR_2012_11-CTRL-005 - Quarterly PCI vulnerability assessmentBE_NBB_CIRCULAR_2012_11-CTRL-006 - Outsourcing provider oversightBE_NBB_CIRCULAR_2012_11-CTRL-007 - DORA Register of Information maintenanceBE_NBB_CIRCULAR_2012_11-CTRL-008 - CTIF suspicious activity escalationBE_NBB_CIRCULAR_2012_11-CTRL-009 - NIS2 cyber resilience testingBE_NBB_CIRCULAR_2012_11-CTRL-010 - Instant payment availability monitoringNBB2012-001-001 - Outsourcing Risk Management Framework for PIsNBB2012-002-001 - Critical Outsourcing Monitoring and OversightNBB2012-003-001 - Outsourcing Notification and NBB Approval