cyber incident
Defined in Article 2, Regulation (EU) 2025/1355 of the ECB
Definitions over time (1)
-
03/08/2025 – today applies on 11/11/2026 Article 2, Regulation (EU) 2025/1355 of the ECB Scope: Whole act
For the purposes of this Regulation, the following definitions apply:
‘cyber incident’ means any observable occurrence in an information system, including the networks that enable the transfer of information and communication, that (a) jeopardises or adversely affects cybersecurity; or (b) violates the security policies, security procedures or acceptable use policies, whether resulting from malicious activity or not;