Read the CySEC Circular C735
Memo #58-2025
CySEC Circular No: C735
Date: 23/10/2025
Subject: Joint Guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents under Regulation (EU) 2022/2554
Purpose: To inform the financial entities that fall under the responsibility of CySEC, as defined in Article 46 of DORA Regulation, that CySEC has adopted the Joint Guidelines JC 2024 34 of the ESAs.
In Summary:
CySEC has issued the Circular C735 on 22/10/2025 to inform the CIFs, Crypto-Asset Service Providers authorised by CySEC under the Regulation (EU) No 2023/1114, Issuers of Asset-Referenced Tokens when the Home Member State of the issuer of the said token is the Republic and which has been authorised by CySEC, in accordance with Article 21 of Regulation (EU) 2023/1114, Central Securities Depositories that have been authorised in the Republic for the basic services of Section A of Regulation (EU) no. 909/2014 and/or for non-banking ancillary services of Section B of Regulation (EU) no. 909/2014, Central counterparties that fall under Regulation (EU) No 648/2012 who are established in the Republic, Trading venues of the Republic, Alternative Investment Fund Managers of the Republic, Management companies authorised by CySEC and the Crowdfunding services providers authorised by CySEC, that fall under the responsibility of CySEC, as defined in Article 46 of Regulation (EU) 2022/2554 (“DORA Regulation”), that CySEC has adopted the Joint Guidelines of the European Supervisory Authorities (“ESAs”) on the estimation of aggregated annual costs and losses caused by major ICT-related incidents under Article 11(11) of Regulation 2022/2554 (the “Guidelines”), which were issued on 17/07/2024.
The CySEC further informs that the Joint Guidelines are issued pursuant to Article 16 of Regulation (EU) No 1093/2010, Article 16 of Regulation (EU) No 1094/2010, and Article 16 of Regulation (EU) No 1095/2010, ‘the ESAs’ Regulations’ aiming to develop common guidelines on the estimation of aggregated annual costs and losses of major ICT-related incidents referred to Article 11(10) of DORA Regulation. The Guidelines also specify a common template for the submission of the aggregated annual costs and losses.
The Guidelines can be found on the following link: https://www.esma.europa.eu/sites/default/files/2024-07/JC_2024-34_-_Final_report_GL_on_costs_and_losses.pdf
Read the CySEC Circular C735
Read more news at Regulatory News
