U IT's blog

On reporting of major ICT-related incidents and significant cyber threats under the Digital Operational Resilience Act (DORA).

Application of the Joint ESA Guidelines on the estimation of aggregated annual costs and losses caused by major ICT- related incidents under Regulation (EU) 2022/2554 (JC 2024 34).

This publication refers to a list of questions/answers (FAQ) in relation to the completion of the AML/CFT Market Entry Form (Funds and IFMs) in eDesk.

FAQ concerning the Luxembourg Law of 12 July 2013 on alternative investment fund managers.

Version 1.55

As indicated in a previous communiqué published on 15 January 2025, financial entities were required to submit their relevant registers of information to the CSSF, then correct and re-submit their registers of information via eDesk until the end of April 2025.

Application of the Guidelines of the European Banking Authority on templates to assist competent authorities in performing their supervisory duties regarding issuers’ compliance under Titles III and IV of Regulation (EU) 2023/1114 (EBA/GL/2024/16).

Comme indiqué dans un précédent communiqué daté du 15 janvier 2025, les entités financières étaient tenues de soumettre leurs registres d’informations pertinents à la CSSF, puis de corriger et de soumettre à nouveau leurs registres d’informations via eDesk avant la fin du mois d’avril 2025.

From 2 January 2024, the CSSF requires that credit institutions transmit their national reports B4.5 (Analysis of shareholdings) and B4.6 (Persons responsible for certain functions and activities) using one of the two following methods:

L’objet du tableau B 4.5 est de permettre à la CSSF de suivre la composition de l’actionnariat des établissements de crédit conformément à la loi.

Version 4 – April 2025

The CSSF is hereby informing all supervised entities of important updates concerning the provisions of several CSSF circulars, following the entry into application of DORA1. It must be noted that the updates not only concern entities falling in the scope of DORA and supervised by the CSSF2 (“DORA entities”), but also other entities supervised by the CSSF (“non-DORA entities”).