Line4

Search line4.ai

In forceBanks and payment service providers: digital operational resilience (EU, ESAs)Last checked 13 November 2026

Major ICT incident reporting and significant cyber-threat notification (DORA-IR/CYB)

A regulatory return listed by the Banka Slovenije (Bank of Slovenia) (BS), Slovenia.

Banks, hranilnice, payment institutions (including with a waiver), e-money institutions (including with a waiver) and account information service providers report major ICT-related incidents, and may voluntarily notify significant cyber threats, under DORA. Source

Official title: Poročanje o večjih incidentih in obveščanje o pomembnih kibernetskih grožnjah

The facts

Who files
Banks and hranilnice, payment institutions, payment institutions with a waiver, e-money institutions, e-money institutions with a waiver, and account information service providers. Source
How often
Initial report: within 4 hours of the incident being classified major, and within 24 hours of the entity becoming aware of it. Intermediate report: within 72 hours of the initial report, updated as needed. Final report: within one month of the (last updated) intermediate report. Cyber-threat notification: voluntary, once the entity finds the threat relevant. Source
Deadline
Initial report within 4 hours of classification as major and 24 hours of becoming aware; intermediate report within 72 hours of the initial report; final report within one month of the intermediate report. Source
Format
Excel. DORA-IR template (also has a JSON Schema) and DORA-CYB template, both standard EU templates under the joint ESAs implementing technical standard. Source
How it is filed
Filing routes recorded for the BS: BS_B2BWS web services; ZBS_B2BService; iBSWSClient; Web pages for file exchange (Izmenjava datotek); iBSReport2; AIF reporting application; PS Tarife application. See how firms file with the BS.
Status
In force
Legal basis
Group
Banks and payment service providers: digital operational resilience (EU, ESAs)

Templates (2)

The tables and forms inside the return. Plain name first, the BS's code in brackets.

  • Major incident report template, version 1.3 (also published as a JSON Schema) (DORA-IR)
  • Significant cyber-threat notification template, version 1.3 (DORA-CYB)

EU return: the standard templates are set by the joint ESAs implementing technical standard (ITS (EU) 2025/302). No library entry (such as eba/dora, which covers the DORA register of information, a different return) matches this specific major-incident/cyber-threat report closely enough to link, so it is described here from Banka Slovenije's own page. Source

Validation rules

The BS publishes the checks it runs on this return. They could not be counted from the published material. Software can run them exactly as published. Source

How they are written: JSON Schema (structural validation) for the DORA-IR template; no equivalent schema found for DORA-CYB.

The rules, on bsi.si

How they were counted

Not counted: DORA_IR_Schema_v1.3.JSON is a JSON Schema (structural validation of required fields and types), not a list of business rules.

Counts are in the BS's own unit, so they are not comparable with other regulators' counts.

Public data

No published data from this return was found. No data from this return published by Banka Slovenije was found on the pages checked. Source

Official documents (4)

The BS's own files, with the size and SHA-256 fingerprint of each as downloaded on 13 November 2026, so anyone can tell whether a copy is the same version.

Sources

Every page and document this return's facts were read from.

Knowing exactly what is collected, in what format and under which rules is the first step to real-time supervision. Line4 builds SupTech software for financial regulators that runs checks like these as each return arrives.

Line4's own text, and the way Line4 has collected and arranged these records, are free to reuse under CC BY 4.0. Please credit: “Source: Line4 regulatory submissions library (CC BY 4.0), https://www.line4.ai”. The facts themselves belong to no one. The regulators' document titles, template names, quoted terms and documents belong to them and are not covered by this licence: see BS's reuse terms. This describes what regulators publish. It is not legal or regulatory advice: always rely on the regulator's own text. Not affiliated with or endorsed by any regulator.

Source: Banka Slovenije (BS), https://www.bsi.si. Documents are linked on the regulator's own site, not hosted here. The plain-English summaries are Line4's own; Banka Slovenije does not endorse this library.

Last checked 13 November 2026.