Professionals
Markets
Consumers

Search in:

All content

Regulatory framework

Publication and data

Search for information

Direct links

Entities

Access the database

Professionals
Markets
Consumers

Search Entities

Whistleblowing

Customer complaint

Public register of the audit profession

Skip to content

Professionals
Markets
Consumers

About the CSSF
Careers
Contacts

fr
en

Professionals
Markets
Consumers

Entity types
Regulatory framework
Publication and Data

CSSF Search & Toolbox

Open the search or access the CSSF tools and applications

Published on 22 April 2022

Circular CSSF

Circular CSSF 22/806

on outsourcing arrangements

PDF (498.79Kb)

Keywords

Cloud Information and communications technology (ICT) Internal governance Operational risk Outsourcing

Relevant for

Alternative Investment Fund Managers (AIFM)
Central Securities Depositories (CSDs)
Credit institutions
Data Reporting Service Providers (DRSP)
E-money institution
Investment companies in risk capital (SICAR)
Investment firms
Management Companies - Chapter 15
Payment institution
Pension funds
Securitisation undertakings
Specialised investment funds (SIF)
Specialised PFS
Support PFS
Undertakings for collective investment (UCI)
Undertakings for collective investment in transferable securities (UCITS)

Related documents

26 April 2022

Circular CSSF 04/155 (as amended by Circular CSSF 22/806) (track changes)

The Compliance function Applicable from 30 June 2022

PDF (170.13Kb)

PDF (171.51Kb)
25 April 2022

Circular IML 98/143 (as amended by Circulars CSSF 04/155 and CSSF 22/806) (track changes)

Internal control Applicable from 30 June 2022

PDF (215.85Kb)

PDF (208.88Kb)
22 April 2022

Circular CSSF 22/805

Revised EBA Guidelines on outsourcing arrangements (EBA/GL/2019/02) – Publication of Circular CSSF 22/806 on outsourcing arrangements – Repeal or amendments of certain circulars CSSF

PDF (164.99Kb)
22 April 2022

Circular IML 95/120 (as amended by Circular CSSF 22/806) (track changes)

Central administration Applicable from 30 June 2022

PDF (125.43Kb)

PDF (123.71Kb)
22 April 2022

CSSF FAQ – Circular CSSF 22/806 on outsourcing arrangements

PDF (177.54Kb)
22 April 2022

Circular IML 96/126 (as amended by Circular CSSF 22/806) (track changes)

Administrative and accounting organisation Applicable from 30 June 2022

PDF (185.13Kb)

PDF (196.16Kb)
22 April 2022

Circular CSSF 20/758 (as amended by Circular CSSF 21/785 and CSSF 22/806) (track changes)

on central administration, internal governance and risk management Applicable from 30 June 2022

PDF (584.34Kb)

PDF (552.97Kb)
7 December 2020 - Updated on 14 October 2021

Circular CSSF 20/758 (as amended by Circular CSSF 21/785)

on central administration, internal governance and risk management Applicable until 30 June 2022

PDF (577.13Kb)

PDF (479.89Kb)
14 October 2021

Notification for outsourcing of material IT activities

DOCX (138.17Kb)
17 May 2017 - Updated on 14 October 2021

Circular CSSF 17/654 (as amended by Circulars CSSF 19/714, CSSF 21/777 and 21/785)

IT outsourcing relying on a cloud computing infrastructure

PDF (251.51Kb)

PDF (242.51Kb)
17 May 2017 - Updated on 14 October 2021

Circular CSSF 17/656 (as amended by Circular CSSF 21/785)

Administrative and accounting organisation; IT outsourcing

PDF (185.39Kb)

PDF (160.65Kb)
14 October 2021

Circular CSSF 21/785

Replacement of the prior authorisation obligation by a prior notification obligation in the case of material IT outsourcing

PDF (144.6Kb)

PDF (137.26Kb)
12 July 2021

Circular CSSF 21/777

Implementation of the Guidelines of the European Securities and Markets Authority (ESMA) on outsourcing to cloud service providers by amending the scope of Circular CSSF 17/654, as amended

PDF (121.74Kb)

PDF (117.82Kb)
27 March 2019

Circular CSSF 19/714

Update of Circular CSSF 17/654 on IT outsourcing relying on a cloud computing infrastructure

PDF (256.85Kb)

PDF (253.01Kb)
16 April 2015

Circular CSSF 15/611

Managing the risks related to the outsourcing of systems that allow the compilation, distribution and consultation of management board/strategic documents

PDF (15.77Kb)

PDF (23.13Kb)
7 January 2013

Circular CSSF 13/554

Evolution of the usage and control of the tools for managing information technology resources and the management of access to these resources

PDF (33.46Kb)

PDF (33.1Kb)
11 April 1996 - Updated on 4 October 2005

Circular IML 96/126

Administrative and accounting organisation Applicable until 30 June 2022

PDF (59.69Kb)

PDF (66.14Kb)
27 September 2004

Circular CSSF 04/155

The Compliance function Applicable until 30 June 2022

PDF (46.16Kb)

PDF (46.09Kb)
1 April 1998 - Updated on 27 September 2004

Circular IML 98/143 (as amended by Circular CSSF 04/155)

Internal control Applicable until 30 June 2022

PDF (80.31Kb)

PDF (77Kb)
28 July 1995

Circular IML 95/120

Central administration Applicable until 30 June 2022

PDF (17.95Kb)

PDF (23.02Kb)

Follow us

Contacts
Help
Useful links
Subscribe
RSS feed
Press Room
Terms of Service and Privacy Policy

All rights reserved.
Copyright © Commission de Surveillance du Secteur Financier, Luxembourg

We use cookies to ensure that we give you the best experience on our website. By clicking “Accept all”, you consent to the use of all of the cookies. Cookie settings Accept all

Cookie settings

We use cookies to improve your experience while you navigate our website. Strictly necessary cookies are stored in your browser as they are essential for the website to function. Other cookies further improve your experience and help us analyze how users interact with our website by collecting anonymous data. These cookies will only be stored in your browser with your consent.

Toggle

These technical cookies only store anonymous data and are necessary for the website to function. These cannot be disabled.

Name	Description	Duration
cssf_cookies	Saves information regarding the user's consent to the use of cookies for each optional category.	1 year
ROUTEID	Technical cookie allowing load distribution.	Deleted when the browsing session ends
TBMCookie*	Security: This cookies protects the website against automated attacks.	Deleted when the browsing session ends
__utmvc	These first party cookies are set by a third party service to filter out malicious requests.	Deleted when the browsing session ends
__utmvm*	These first party cookies are set by a third party service to filter out malicious requests.	15 minutes

Toggle

Functional cookies provide enhanced functionality and improve your experience when you navigate our website. They may be set by us or by third party providers whose services are included in some of our pages. Disabling these cookies may affect your experience and some services may not function properly.

Name	Description	Duration
cssf_profile	This cookie adapts the website pages to the profile chosen by the visitor (professionals, markets, consumers).	1 year
pll_language	This cookie saves the user’s language choice.	1 year

Toggle

Performance cookies help us collect anonymous statistical data such as the number of visits, the average time spent on the website or the pages consulted during a browsing session. The information is aggregated and anonymous, and allows us to monitor and improve the performance of our website.

Name	Description	Duration
_pk_id.#	Collects anonymous statistical data on the website consultations, such as the number of visits or the average time spent on the website. The data is processed in-house and is not shared with a third party.	1 month
_pk_ses.#	Collects anonymous statistical data for the tracking of the pages consulted during the browsing session. The data is processed in-house and is not shared with a third party.	30 minutes

Toggle

This content from a third party provider has been blocked. By allowing this content to load, you agree with the terms of SoundCloud's cookie usage and privacy policy

Save preferences Reset cookies

Accept all