CHAPTER III – ICT-related incident management, classification and reporting Article 17 DORA – ICT-related incident management process Article 18 DORA – Classification of ICT-related incidents and cyber threats Article 19 DORA – Reporting of major ICT-related incidents and voluntary notification of significant cyber threats Article 20 DORA – Harmonisation of reporting content and templates Article 21 DORA Article 22 DORA – Supervisory feedback Article 23 DORA – Operational or security payment-related incidents concerning credit institutions, payment institutions, account information service providers, and electronic money institutions 2025-12-03