Article 21

1. The ESAs, through the Joint Committee, and in consultation with the ECB and ENISA, shall prepare a joint report assessing the feasibility of further centralisation of incident reporting through the establishment of a single EU Hub for major ICT-related incident reporting by financial entities. The joint report shall explore ways to facilitate the flow of ICT-related incident reporting, reduce associated costs and underpin thematic analyses with a view to enhancing supervisory convergence. 2. The joint report referred to in paragraph 1 shall comprise at least the following elements: prerequisites for the establishment of a single EU Hub; benefits, limitations and risks, including risks associated with the high concentration of sensitive information; the necessary capability to ensure interoperability with regard to other relevant reporting schemes; elements of operational management; conditions of membership; technical arrangements for financial entities and national competent authorities to access the single EU Hub; a preliminary assessment of financial costs incurred by setting-up the operational platform supporting the single EU Hub, including the requisite expertise. 3. The ESAs shall submit the report referred to in paragraph 1 to the European Parliament, to the Council and to the Commission by 17 January 2025.

← art_20__para__4 · All articles · art_21__para_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-12 · Text as adopted (Official Journal); later amendments are not incorporated in this text.