New and modified templates in relation to authorisation requests and notifications for IT outsourcing

The CSSF informs supervised institutions of the release of a new form to be used in the case of an authorisation request for IT outsourcing of material activities (“critical or important functions” in the sense of the EBA GL on outsourcing arrangements EBA/GL/2019/02) in the case of outsourcing under Circular CSSF 12/552 or under Circular CSSF 17/656. The form can be found in the following section:

Furthermore, the CSSF draws the attention of the supervised institutions to the fact that Form A to be used in the case of cloud computing outsourcing for a prior notification to be transmitted to the competent authority where a cloud computing infrastructure will be used for a material activity and provided by an institution authorised under Articles 293 and 29-4 of the LFS (“support PSF”), was updated. The form can be found in the following section:

Finally, the FAQ on the assessment of IT outsourcing materiality have been updated at the same time. The document can be found in the following section: