Art. 2 Reputational impact | RTS on incident classification | DORA

1. For the purposes of determining the reputational impact of the incident as referred to in Article 18(1), point (a), of Regulation (EU) 2022/2554, financial entitiesas defined in Article 2, points (a) to (t) shall consider that a reputational impact has occurred where at least one of the following criteria is met:
  1. the incident has been reflected in the media;
  2. the incident has resulted in repetitive complaints from different clients or financial counterparts on client-facing services or critical business relationships;
  3. the financial entity will not be able to or is likely not to be able to meet regulatory requirements as a result of the incident;
  4. the financial entity will or is likely to lose clients or financial counterparts with a material impact on its business as a result of the incident.
1. When assessing the reputational impact of the incident, financial entitiesas defined in Article 2, points (a) to (t) shall take into account the level of visibility that the incident has gained or is likely to gain in relation to each criterion listed in paragraph 1.