Archives: Documents

10 Results

  • Other guidance
    Document date: 29 September 2026

    ESMA’s DORA incident reporting – operational instructions

    Main topics: ICT and cyber risk – for DORA entities
    Relevant for: Central Securities Depositories (CSDs) Credit institutions Credit servicers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Payment institutions/electronic money institutions/AISPs
    Topics: Cybersecurity Information and communications technology (ICT) Information security
  • Other guidance
    Document date: 29 September 2026

    EBA’s DORA incident reporting – operational instructions

    Main topics: ICT and cyber risk – for DORA entities
    Relevant for: Central Securities Depositories (CSDs) Credit institutions Credit servicers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Payment institutions/electronic money institutions/AISPs
    Topics: Cybersecurity Information and communications technology (ICT) Information security
  • CSSF guidance
    Document date: 29 September 2026

    Additional CSSF operational instructions on DORA major ICT-related incident reporting

    Main topics: ICT and cyber risk – for DORA entities
    Relevant for: Central Securities Depositories (CSDs) Credit institutions Credit servicers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Payment institutions/electronic money institutions/AISPs
    Topics: Cybersecurity Information and communications technology (ICT) Information security
  • CSSF guidance
    Document date: 28 September 2026

    Operational guidance for incident handling

    Relevant for: Central Securities Depositories (CSDs) Credit institutions Credit servicers Crowdfunding service providers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Investment funds and vehicles Issuers of Tokens Mortgage credit intermediaries Payment institutions/electronic money institutions/AISPs Public Oversight of the Audit Profession Securitisation undertakings Specialised PFS Support PFS
    Topics: Cybersecurity Information and communications technology (ICT) Information security
  • Press release
    Document date: 24 September 2026

    Luxembourg finalises its first vertical risk assessment on international financial sanctions related to terrorist financing and to proliferation financing

    Ministry of Finance

    Main topics: Financial crime
    Relevant for: Central Securities Depositories (CSDs) Credit institutions Credit servicers Crowdfunding service providers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Investment funds and vehicles Issuers of Tokens Mortgage credit intermediaries Payment institutions/electronic money institutions/AISPs Securitisation undertakings Specialised PFS Support PFS
    Topics: International sanctions Proliferation financing Risk assessment Terrorist financing