Documents – Page 39

Studies and reports

Document date: 25 April 2025

Iliad – Universal Registration Document 2024 (only in French)

Main topics: Prospectus

Monthly statistics

Document date: 24 April 2025

Basic statistical data on UCIs – March 2025 (only in French)

Relevant for: Investment funds and vehicles

Technical document

Document date: 24 April 2025

CSSF guide concerning the submission of DORA Register of information

Guidance related to the composition and the content of a register of information. Compilation of information from different ESA sources.

Main topics: ICT and cyber risk – for DORA entities

Relevant for: Central Securities Depositories (CSDs) Credit institutions Crowdfunding service providers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Issuers of Tokens Payment institutions/electronic money institutions/AISPs Pension fund

Topics: eDesk Information and communications technology (ICT)

CSSF circular

Document date: 16 April 2025

Circular CSSF 25/884

1) Application of the Guidelines of the European Banking Authority on sound remuneration policies under Directive (EU) 2019/2034 (EBA/GL/2021/13)
2) Clarification of the remuneration requirements applicable to the SNI IFR investment firms under Directive (EU) 2019/2034

Relevant for: Investment firms

Topics: Internal governance Remuneration

Administrative sanction

Document date: 14 April 2025

Administrative sanction of 20 December 2024

Administrative sanction imposed on a réviseur d’entreprises agréé (“approved statutory auditor”)

Relevant for: Public Oversight of the Audit Profession

Form

Document date: 9 April 2025

Notification of an ICT third-party arrangement supporting a critical or important function as required under DORA

Version 4

Main topics: ICT and cyber risk – for DORA entities

Relevant for: Central Securities Depositories (CSDs) Credit institutions Crowdfunding service providers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Issuers of Tokens Payment institutions/electronic money institutions/AISPs Pension fund

Topics: Information and communications technology (ICT) Outsourcing

CSSF circular

Document date: 9 April 2025

Circular CSSF 25/883 (as amended by Circular CSSF 26/915)

amending Circular CSSF 22/806 on outsourcing arrangements

Main topics: ICT and cyber risk – for DORA entities

Relevant for: Central Securities Depositories (CSDs) Credit institutions Crowdfunding service providers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment companies in risk capital (SICARs) Investment firms Investment fund managers Issuers of Tokens Payment institutions/electronic money institutions/AISPs Pension fund Specialised PFS Support PFS

Topics: Cloud Cybersecurity Information and communications technology (ICT) Information security Outsourcing

CSSF circular

Document date: 9 April 2025

Circular CSSF 25/882 (as amended by Circular CSSF 26/915)

on requirements on the use of ICT third-party services for Financial Entities subject to the Digital Operational Resilience Act (DORA)

Main topics: ICT and cyber risk – for DORA entities

Relevant for: Central Securities Depositories (CSDs) Credit institutions Crowdfunding service providers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Issuers of Tokens Payment institutions/electronic money institutions/AISPs Pension fund

Topics: Cloud Cybersecurity Information and communications technology (ICT) Information security Outsourcing

CSSF circular

Document date: 9 April 2025

Circular CSSF 25/881 (as amended by Circular CSSF 26/915)

amending Circular CSSF 20/750 on requirements regarding information and communication technology (ICT) and security risk management

Main topics: ICT and cyber risk – for DORA entities

Relevant for: Central Securities Depositories (CSDs) Credit institutions Crowdfunding service providers Crypto-Assets Service Providers (CASPs) Data Reporting Service Providers (DRSPs) Investment companies in risk capital (SICARs) Investment firms Investment fund managers Issuers of Tokens Payment institutions/electronic money institutions/AISPs Pension fund Specialised PFS Support PFS

Topics: Cloud Cybersecurity Information and communications technology (ICT) Information security Outsourcing

Name	Description	Duration
cssf_cookies	Saves information regarding the user's consent to the use of cookies for each optional category.	1 year
ROUTEID	Technical cookie allowing load distribution.	Deleted when the browsing session ends
TBMCookie*	Security: This cookies protects the website against automated attacks.	Deleted when the browsing session ends
__utmvc	These first party cookies are set by a third party service to filter out malicious requests.	Deleted when the browsing session ends
__utmvm*	These first party cookies are set by a third party service to filter out malicious requests.	15 minutes

Name	Description	Duration
cssf_profile	This cookie adapts the website pages to the profile chosen by the visitor (professionals, markets, consumers).	1 year
pll_language	This cookie saves the user’s language choice.	1 year

Name	Description	Duration
_pk_id.#	Collects anonymous statistical data on the website consultations, such as the number of visits or the average time spent on the website. The data is processed in-house and is not shared with a third party.	1 year
_pk_ses.#	Collects anonymous statistical data for the tracking of the pages consulted during the browsing session. The data is processed in-house and is not shared with a third party.	30 minutes

Archives: Documents