SWIFTER-MiCA CorE v1.0.0

Agentic AI: Operational (Latency 14ms)

LEI: 5493000I321B02L48B23

● S2S GATEWAY ACTIVE

2026 DORA POST-INCIDENT REVIEW (ARTICLE 13)

Incident Ref: SBLC-BR-99 (Madrid Node)

Classification:

MAJOR ICT-RELATED INCIDENT

Status:

CLOSED & REMEDIATED

1. Root Cause Analysis (RCA)
  • Primary Cause: Compromised API credentials at Partner Bank (External).
  • Secondary Cause: Lack of geo-fenced IP restrictions on the Madrid Draw-Down API.
  • Forensic Evidence: PQC signature mismatch logs (ML-DSA-87).
2. Effectiveness Assessment
MetricTimeGoalStatus
Detection Time8.4 seconds< 15s
PASSED
Classification Time12 minutes< 240m
PASSED
Notification Time134 minutes< 240m
PASSED
3. Mandatory Improvements (Action Plan)
  1. Technical: Implement ML-KEM session binding to specific Bank HSM serial numbers.
  2. Operational: Update BCP to include "Single-Node Isolation" for suspected SBLC fraud.
  3. Governance: Mandatory retraining for Treasury staff on "Ghost pacs.009" patterns.
4. Management Body Sign-off

Approval Date: 2026-01-15

Board Resolution: #RES-2026-004