{
  "node_id": "eu-dora-rts-incident-reporting-2025-301",
  "title": "Commission Delegated Regulation (EU) 2025/301 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-06-28",
  "bluf": "This DORA regulatory technical standard sets the content and time limits for reporting major ICT-related incidents: an initial notification within four hours of classification (and no later than 24 hours from awareness), an intermediate report within 72 hours, and a final report no later than one month, and it specifies the content of the voluntary notification for significant cyber threats; it supplements DORA Article 20.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "dora-incident-reporting-articles-17-23",
    "dora-regulation-article-10-detection",
    "dora-regulation-article-11-response-recovery"
  ],
  "primary_citations_count": 7
}