meta_id 3314822

On July 9, 2026, the Bank of Italy published its annual report "Supervisory Dashboard of Serious ICT Incidents – Horizontal Analysis 2025," which synthesises key findings from notifications of serious information and communication technology (ICT) incidents reported to the institution during 2025 under the Digital Operational Resilience Act (DORA), EU Regulation 2022/2554. The report reveals a significant increase in ICT incidents compared to the previous year. The majority of incidents were operational in nature, with approximately one quarter relating to cybersecurity. The analysis highlights substantial involvement of external service providers in reported incidents. The findings underscore the importance of the new serious ICT incident reporting framework introduced by DORA in strengthening the Bank of Italy's capacity to analyse and monitor cyber risks across the financial sector. The growing number of incidents and the material involvement of ICT service providers reinforce the necessity for financial intermediaries to establish robust governance and control frameworks for ICT risk management. Intermediaries must effectively manage third-party risk and ensure full compliance with DORA requirements. The report confirms that the standardised incident notification scheme established under DORA has proven instrumental in enhancing supervisory oversight and risk monitoring capabilities within Italy's financial sector. The full report is available on the Bank of Italy website.