Search in:

Search for information (3 characters minimum)

All content Regulatory framework Publication and data

Direct links

Loading...

Entities

Access the database

Loading...

Search Entities
eDesk – EN
Managed File Transfer (MFT)
Filing of the final terms of the base prospectuses
e-Prospectus
Short Selling Platform
eRIIS
eRegister by eDesk
Public register of the audit profession
EBA and ESMA Guidelines and Recommendations
Whistleblowing
Customer complaint

Skip to content

Loading...

Contrasts

About the CSSF
Careers
Whistleblowing
Contact

fr
en

Loading...

Entity types
Topics
Regulatory framework
Publication and Data

CSSF Search & Toolbox

Open the search or access the CSSF tools and applications

Published on 20 January 2026

Email this
Share this on LinkedIn
Share this on Facebook

CSSF circular

Circular CSSF 26/906

Central administration, internal governance and risk management

PDF (514.17Kb)

PDF (513.36Kb)

Keywords

Internal governance
Payment services

Relevant for

Payment institutions
Payment institutions/electronic money institutions/AISPs

Related documents

13 May 2015 - Updated on 30 June 2026

Circular CSSF 15/614 (as amended by Circular CSSF 26/906)

Documents to be submitted to the CSSF after the closure of the financial year

PDF (174.68Kb)

PDF (174.91Kb)
8 July 2013 - Updated on 30 June 2026

Circular CSSF 13/569 (as modified by Circular CSSF 26/906)

Practical rules concerning the mission of the réviseurs d’entreprises agréés (approved statutory auditors) of electronic money institutions

PDF (317.32Kb)

PDF (295.72Kb)
7 December 2012 - Updated on 30 June 2026

Circular CSSF 12/550 (as amended by Circular CSSF 26/906)

Practical rules concerning the mission of the réviseurs d’entreprises agréés (approved statutory auditors) of payment institutions

PDF (294.15Kb)

PDF (282.33Kb)
27 September 2004 - Updated on 30 June 2026

Circular CSSF 04/155 (as amended by Circulars CSSF 12/552, CSSF 22/806 et CSSF 26/906)

The Compliance function

PDF (257.26Kb)

PDF (262.13Kb)
1 April 1998 - Updated on 30 June 2026

Circular IML 98/143 (as amended by Circulars CSSF 04/155, 12/552 and 22/806)

Internal control

PDF (321.2Kb)

PDF (347.27Kb)
11 April 1996 - Updated on 30 June 2026

Circular IML 96/126 (as amended by Circulars CSSF 12/552, CSSF 22/806 and CSSF 26/906)

Administrative and accounting organisation

PDF (238.84Kb)

PDF (237.62Kb)
28 July 1995 - Updated on 30 June 2026

Circular IML 95/120 (as amended by Circulars CSSF 12/552, 22/806 and 26/906)

Central administration

PDF (198.5Kb)

PDF (218.39Kb)
11 October 2011 - Archived on 30 June 2026

Circular CSSF 11/520 repealed by Circular CSSF 26/906

Circulars applicable to electronic money institutions as regards central administration and infrastructure

PDF (184.93Kb)

PDF (185.94Kb)
11 May 2011 - Archived on 30 June 2026

Circular CSSF 11/510 repealed by Circular CSSF 26/906

Circulars applicable to payment institutions as regards central administration and infrastructure

PDF (184.2Kb)

PDF (186.13Kb)

Follow us

Follow us on LinkedIn
Follow us on Vimeo

Contact
Help
Useful links
Subscribe
RSS feed
Press Room
Terms of Service and Privacy Policy
Manage Cookies
Accessibility

All rights reserved.
Copyright © Commission de Surveillance du Secteur Financier, Luxembourg

We use cookies to ensure that we give you the best experience on our website. By clicking “Accept all”, you consent to the use of all of the cookies.

Cookie settings

Cookie settings

We use cookies to improve your experience while you navigate our website. Strictly necessary cookies are stored in your browser as they are essential for the website to function. Other cookies further improve your experience and help us analyse how users interact with our website by collecting anonymous data. These cookies will only be stored in your browser with your consent.

Necessary cookies: Allow

These technical cookies only store anonymous data and are necessary for the website to function. These cannot be disabled.

Name	Description	Duration
cssf_cookies	Saves information regarding the user's consent to the use of cookies for each optional category.	1 year
ROUTEID	Technical cookie allowing load distribution.	Deleted when the browsing session ends
TBMCookie*	Security: This cookies protects the website against automated attacks.	Deleted when the browsing session ends
__utmvc	These first party cookies are set by a third party service to filter out malicious requests.	Deleted when the browsing session ends
__utmvm*	These first party cookies are set by a third party service to filter out malicious requests.	15 minutes

Functional cookies: Allow

Functional cookies provide enhanced functionality and improve your experience when you navigate our website. They may be set by us or by third party providers whose services are included in some of our pages. Disabling these cookies may affect your experience and some services may not function properly.

Name	Description	Duration
cssf_profile	This cookie adapts the website pages to the profile chosen by the visitor (professionals, markets, consumers).	1 year
pll_language	This cookie saves the user’s language choice.	1 year

Performance cookies: Allow

Performance cookies help us collect anonymous statistical data such as the number of visits, the average time spent on the website or the pages consulted during a browsing session. The information is aggregated and anonymous, and allows us to monitor and improve the performance of our website.

Name	Description	Duration
_pk_id.#	Collects anonymous statistical data on the website consultations, such as the number of visits or the average time spent on the website. The data is processed in-house and is not shared with a third party.	1 year
_pk_ses.#	Collects anonymous statistical data for the tracking of the pages consulted during the browsing session. The data is processed in-house and is not shared with a third party.	30 minutes

SoundCloud: Allow

This content from a third party provider has been blocked. By allowing this content to load, you agree with the terms of SoundCloud's cookie usage and privacy policy