Read the CySEC Circular C700
Memo #26-2025
CySEC Circular No: C700
Date: 10/04/2025
Subject: Digital Operational Resilience Act - Reporting Obligations (a) Incident Reporting (b) Register of Information
Purpose: To inform the Regulated Entities of their reporting obligations under DORA.
In Summary:
CySEC has issued the Circular C700 on 08/04/2025 to inform Cyprus Investment Firms (‘CIFs’), Central Securities Depositories, Trading Venues, Crypto-Asset Providers (CASPs), Alternative Investment Fund Managers (‘AIFMs’) and UCITS Management Companies (‘UCITS’), of their reporting obligations under the Digital Operational Resilience Act (‘the DORA’).
The two main reporting requirements are:
A) Incident Reporting – a) Mandatory reporting of major ICT-related incidents and b) Voluntary notification for significant cyber threats.
B) Register of Information - Annual submission of contractual arrangements related to ICT services supporting critical or important functions.
The Circular C700 provides details on how and when these reporting requirements should be submitted to CySEC along with relevant guidance on the framework in place.
For Incident Reporting, details refer to mandatory reporting of major ICT-related incidents, voluntary notification for significant cyber threats, submission process of the major ICT-related incident form and the Significant Cyberthreats Template.
For Register of Information, details refer to the obligation to maintain and update at entity level, and at consolidated level, a register of information in relation to all contractual arrangements on the use of ICT services provided by ICT third-party service providers, information for the relevant yearly reporting to CySEC, what the Register of information to be submitted to CySEC should be, the deadline to submit the Register of Information Form, the submission process and other useful information.
CySEC notes that Regulated Entities that have not yet registered in CySEC’s XBRL Portal, should do so as soon as possible. The Regulated Entities should ensure timely and accurate submission of the required templates
Read the CySEC Circular C700
Read more news at Regulatory News
