DORA major ICT-related incident check
dora_classify_incidentRead-onlyIdempotent
Use when a bank, insurer, investment firm, payment or crypto-asset firm or other financial entity has an IT outage, cyber attack or data incident and asks whether it must be reported under DORA. Classifies the ICT-related incident as major or not under DORA, applying the criteria and materiality thresholds of Commission Delegated Regulation (EU) 2024/1772 (Arts. 6, 8 and 9). Returns the decision, which criteria are met, and the reporting time limits if major. Leave out what you do not know.
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "dora_classify_incident"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| duration_hours | No | ||
| data_impact_adverse | No | Impact on availability, authenticity, integrity or confidentiality of data that harms business objectives or regulatory compliance (Art. 9(5)(a)) | |
| reputational_impact | No | Media coverage, repetitive complaints, likely failure to meet regulatory requirements, or likely loss of clients with material impact (Art. 2) | |
| costs_and_losses_eur | No | Direct and indirect costs and losses per Art. 7, without financial recoveries | |
| affected_clients_count | No | ||
| affected_clients_percent | No | Affected clients as % of all clients using the affected service | |
| member_states_with_impact | No | ||
| affected_counterparts_percent | No | Affected financial counterparts as % of those active in the affected service | |
| critical_service_downtime_hours | No | Downtime of ICT services supporting critical or important functions | |
| affected_transactions_value_percent | No | Affected transaction amount as % of the daily average value for the service | |
| affected_transactions_number_percent | No | Affected transactions as % of the daily average number for the service | |
| affects_critical_or_important_functions | No | ICT services or systems supporting critical or important functions are affected (Art. 6(a)) | |
| successful_malicious_unauthorised_access | No | A successful, malicious and unauthorised access to network and information systems occurred that may result in data losses (Arts. 6(c), 9(5)(b)) | |
| affects_authorised_or_supervised_services | No | Financial services requiring authorisation or registration, or supervised, are affected (Art. 6(b)) | |
| relevant_clients_or_counterparts_affected | No | Clients or counterparts identified as relevant under Art. 1(3) are affected |