Archives: Documents

10 Results

  • CSSF circular
    Document date: 5 January 2024

    Circular CSSF 24/848

    Application of the Guidelines of the European Banking Authority on the criteria for the identification, evaluation, management and mitigation of the risks arising from potential changes in interest rates and of the assessment and monitoring of credit spread risk, of institutions’ non-trading book activities (EBA/GL/2022/14)

    Relevant for: Credit institutions Investment firms
    Topics: Internal governance Market risk Risk management Stress test
  • CSSF circular
    Document date: 5 January 2024

    Circular CSSF 24/847

    on ICT-related incident reporting framework

    Relevant for: Central Securities Depositories (CSDs) Credit institutions Crowdfunding service providers Data Reporting Service Providers (DRSPs) Investment firms Investment fund managers Payment institutions Payment institutions/electronic money institutions/AISPs Specialised PFS Support PFS
    Topics: Cybersecurity Information and communications technology (ICT) Information security Operational risk
  • CSSF regulation
    Document date: 5 January 2024

    CSSF Regulation No 24-01 of 5 January 2024

    relating to the notification of incidents according to the Law of 28 May 2019 transposing Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the European Union.

    Relevant for: Management companies - Chapter 16 Payment institutions Specialised PFS Support PFS
    Topics: Cybersecurity Information and communications technology (ICT) Information security Operational risk
  • Law
    Document date: 31 May 2019

    Law of 28 May 2019

    transposing Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the European Union and amending

    1° the Law of 20 April 2009 establishing a Government IT Centre, as amended; and
    2° the Law of 23 July 2016 establishing a High Commission for National Protection.

    Relevant for: Credit institutions Specialised PFS Support PFS
    Topics: Cybersecurity Information and communications technology (ICT) Information security
  • EU regulation
    Document date: 31 January 2018

    Commission Implementing Regulation (EU) 2018/151 of 30 January 2018

    laying down rules for application of Directive (EU) 2016/1148 of the European Parliament and of the Council as regards further specification of the elements to be taken into account by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact

    Relevant for: Support PFS
    Topics: Cybersecurity Information and communications technology (ICT) Information security