Here you can find the official text of CDR (EU) Regulation 2024-1772 – you can easily browse through the text by clicking through chapters and articles, or by searching for keywords in the left-hand side menu.

Chapter 1  –  Classification criteria

Article 1– Clients, financial counterparts and transactions

Article 2– Reputational impact

Article 3– Duration and service downtime

Article 4– Geographical spread

Article 5– Data losses

Article 6– Criticality of services affected

Article 7– Economic impact

Chapter 2  –  Major incidents and materiality thresholds

Article 8– Major incidents

Article 9– Materiality thresholds for determining major incidents

Chapter 3  –  Significant cyber threats

Article 10– High materiality thresholds for determining significant cyber threats

Chapter 4  –  Relevance of major incidents to competent authorities in other member states and details of reports to be shared with other competent authorities

Article 11– Relevance of major incidents to competent authorities in other Member States

Article 12– Details of major incidents to be shared with other competent authorities

Chapter 5  –  Final provisions

Article 13– Entry into force