CSSF

Commission de Surveillance du Secteur Financier (CSSF)

Entry into application of DORA regulation on 17 January 2025

https://www.cssf.lu/en/2025/01/entry-in-application-of-dora-regulation-on-17-january-2025/

ICT and cyber risk – for DORA entities

https://www.cssf.lu/en/ict-and-cyber-risk-for-dora-entities/

CSSF guide concerning the submission of DORA Register of information

https://www.cssf.lu/en/Document/cssf-guide-concerning-the-submission-of-dora-register-of-information/

DORA – Submission timeframe for register of information – eDesk Portal open as of 1 April 2025

https://www.cssf.lu/en/2025/04/dora-submission-timeframe-for-register-of-information-edesk-portal-open-as-of-1-april-2025/

Notification of an ICT third-party arrangement supporting a critical or important function as required under DORA

https://www.cssf.lu/en/Document/notification-of-an-ict-third-party-arrangement-supporting-a-critical-or-important-function-as-required-under-dora/

Luxembourg “DORA Law” published in the Official Journal

https://www.cssf.lu/en/2024/07/luxembourg-dora-law-published-in-the-official-journal/

DORA – Publication by the CSSF of a guide providing detailed information related to the error and warning messages raised by the ESAs as a result of the validation checks they perform on the received registers of information

https://www.cssf.lu/en/2025/05/dora-publication-by-the-cssf-of-a-guide-providing-detailed-information-related-to-the-error-and-warning-messages-raised-by-the-esa-as-a-result-of-the-validation-checks-they-perform-on-the-re/

Publication of two new circulars: ICT-related incident classification and reporting for DORA entities and other Payment Service Providers and adoption of ESA Guidelines on the estimation of aggregated costs/losses


ICT-related incident classification and reporting: updates and issuance of one new circular

New CSSF circular on the adoption of ESAs guidelines on the estimation of aggregated costs/losses caused by major ICT-related incidents

https://www.cssf.lu/en/2025/05/publication-of-two-new-circulars-ict-related-incident-classification-and-reporting-for-dora-entities-and-other-payment-service-providers-and-adoption-of-esa-guidelines-on-the-estimation-of-aggregated/

DORA Regulation – reminders and advice on preparedness

https://www.cssf.lu/en/2024/12/dora-regulation-reminders-and-advice-on-preparedness/