Regulatory Alerts2025-05-28
Added · Updated
CSSF Circular 25/892: Application of Joint ESA Guidelines on ICT-Related Incident Costs under DORA
Financial entities in Luxembourg, excluding microenterprises and EU branches reporting to home state authorities, must provide estimations of aggregated annual gross costs and losses from major ICT-related incidents to the CSSF upon request. These estimations must follow the Joint ESA Guidelines (JC/GL/2024/34), utilizing either the calendar or accounting year as the reference period, and be submitted via the specified reporting template for gross costs, losses, and financial recoveries. This circular applies as of 31 May 2025.
More like this from CSSF
We email you every new CSSF publication the day it's published.
Topics
Share