Art 18 - Classification of ICT-related incidents

Article 18 of the Digital Operational Resilience Act requires financial entities to categorize ICT-related incidents by impact and severity, using a standardized set of levels such as minor, major and critical. The classification guides the appropriate response, escalation and reporting obligations under the regulation.