NBB Circular on ICT Incident Reporting and Cyber Threat Notification Under DORA
Summary
The National Bank of Belgium issued Circular NBB_2026_04 establishing procedures for financial institutions to report major ICT-related incidents and voluntarily notify significant cyber threats under the Digital Operational Resilience Act (DORA). The circular applies to credit institutions, stockbroking firms, insurance and reinsurance companies, market infrastructures, payment institutions, e-money institutions, and institutions authorized to hold dematerialised securities. Affected entities must use NBB-specified procedures and timelines for incident reporting and may voluntarily submit notifications regarding significant cyber threats.
About this source
GovPing monitors National Bank of Belgium for new banking & finance regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 6 changes logged to date.
What changed
The NBB published Circular NBB202604 providing detailed guidance on the reporting of major ICT-related incidents and voluntary notification of significant cyber threats under the Digital Operational Resilience Act (DORA). The circular establishes the specific procedures, formats, and timelines that financial institutions must follow when reporting incidents to the NBB.\n\nFinancial institutions supervised by the NBB—including credit institutions, insurance companies, payment institutions, and market infrastructures—must implement compliant incident reporting processes aligned with this circular. Entities should review their current ICT incident response procedures, ensure staff are trained on reporting obligations, and establish mechanisms for both mandatory incident reporting and voluntary cyber threat notifications as specified by DORA requirements.
What to do next
- Review NBB_2026_04 incident reporting procedures and timelines
- Ensure ICT incident response plans align with DORA requirements
- Establish processes for voluntary cyber threat notifications to NBB
Archived snapshot
Apr 16, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
Circular NBB202604 / Reporting of major ICT-related incidents and voluntary notification of significant cyber threats under DORA
Circulars and communications NBB202604 Publication date
2 Apr 2026 - 14:39
Area of responsiblity Supervision of financial institutions Sector Systemic financial institutions Credit institutions Stockbroking firms Insurance and reinsurance companies Market infrastructures Institutions authorised to hold dematerialised securities Payment institutions and e-money institutions Theme Miscellaneous Reporting Download pdf • 42.34 KB
Named provisions
Related changes
Get daily alerts for National Bank of Belgium
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
Source
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from NBB.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when National Bank of Belgium publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.