Search in:

Search for information (3 characters minimum)

All content Regulatory framework Publication and data

Direct links

Loading...

Entities

Access the database

Loading...

Skip to content

Loading...

Contrasts

About the CSSF
Careers
Whistleblowing
Contact

fr
en

Loading...

Entity types
Topics
Regulatory framework
Publication and Data

About the CSSF
Careers
Whistleblowing
Contact

About the CSSF
Careers
Whistleblowing
Contact

CSSF Search & Toolbox

Open the search or access the CSSF tools and applications

Published on 22 April 2022

Updated on 9 April 2025

Email this
Share this on LinkedIn
Share this on Facebook

CSSF circular

Circular CSSF 22/806 (as amended by Circular CSSF 25/883)

on outsourcing arrangements

Link to the communiqué of 1 July 2022

PDF (655.28Kb)

Keywords

Cloud
Information and communications technology (ICT)
Internal governance
Operational risk
Outsourcing

Relevant for

Alternative Investment Fund Managers (AIFM)
Central Securities Depositories (CSDs)
Credit institutions
Data Reporting Service Providers (DRSPs)
E-money institutions
Investment companies in risk capital (SICARs)
Investment firms
Management Companies - Chapter 15
Payment institutions
Pension funds
Securitisation undertakings
Specialised investment funds (SIFs)
Specialised PFS
Support PFS
Undertakings for collective investment in transferable securities (UCITS)
Undertakings for collective investment subject to Part II of the Law of 17 December 2010 (Part II UCIs)

Related documents

9 April 2025

Circular CSSF 25/883

amending Circular CSSF 22/806 on outsourcing arrangements

PDF (827.56Kb)
17 February 2023 - Updated on 9 April 2025

Notification of critical or important ICT outsourcing

Version 3

DOCX (146.17Kb)
1 July 2022

Notification template for outsourcing a critical or important business process (BPO)

DOCX (169.68Kb)
7 December 2020 - Updated on 30 June 2022

Circular CSSF 20/758 (as amended by Circulars CSSF 21/785 and CSSF 22/806)

on central administration, internal governance and risk management

PDF (509.94Kb)

PDF (453.93Kb)
27 September 2004 - Updated on 30 June 2022

Circular CSSF 04/155 (as amended by Circular CSSF 22/806)

The Compliance function

PDF (159.42Kb)

PDF (162.09Kb)
1 April 1998 - Updated on 30 June 2022

Circular IML 98/143 (as amended by Circulars CSSF 04/155 and 22/806)

Internal control

PDF (192.05Kb)

PDF (350.73Kb)
11 April 1996 - Updated on 30 June 2022

Circular IML 96/126 (as amended by Circular CSSF 22/806)

Administrative and accounting organisation

PDF (138.52Kb)

PDF (135.39Kb)
28 July 1995 - Updated on 30 June 2022

Circular IML 95/120 (as amended by Circular CSSF 22/806)

Central administration

PDF (119.1Kb)

PDF (118.49Kb)
22 April 2022

Circular CSSF 22/805

Revised EBA Guidelines on outsourcing arrangements (EBA/GL/2019/02) – Publication of Circular CSSF 22/806 on outsourcing arrangements – Repeal or amendments of certain circulars CSSF

PDF (165.17Kb)
22 April 2022

CSSF FAQ – Circular CSSF 22/806 on outsourcing arrangements

Version 1

PDF (177.54Kb)

Follow us

Follow us on LinkedIn
Follow us on Vimeo

Contact
Help
Useful links
Subscribe
RSS feed
Press Room
Terms of Service and Privacy Policy
Manage Cookies
Accessibility

All rights reserved.
Copyright © Commission de Surveillance du Secteur Financier, Luxembourg

We use cookies to ensure that we give you the best experience on our website. By clicking “Accept all”, you consent to the use of all of the cookies.

Cookie settings

Cookie settings

We use cookies to improve your experience while you navigate our website. Strictly necessary cookies are stored in your browser as they are essential for the website to function. Other cookies further improve your experience and help us analyse how users interact with our website by collecting anonymous data. These cookies will only be stored in your browser with your consent.

Necessary cookies: Allow

These technical cookies only store anonymous data and are necessary for the website to function. These cannot be disabled.

Name	Description	Duration
cssf_cookies	Saves information regarding the user's consent to the use of cookies for each optional category.	1 year
ROUTEID	Technical cookie allowing load distribution.	Deleted when the browsing session ends
TBMCookie*	Security: This cookies protects the website against automated attacks.	Deleted when the browsing session ends
__utmvc	These first party cookies are set by a third party service to filter out malicious requests.	Deleted when the browsing session ends
__utmvm*	These first party cookies are set by a third party service to filter out malicious requests.	15 minutes

Functional cookies: Allow

Functional cookies provide enhanced functionality and improve your experience when you navigate our website. They may be set by us or by third party providers whose services are included in some of our pages. Disabling these cookies may affect your experience and some services may not function properly.

Name	Description	Duration
cssf_profile	This cookie adapts the website pages to the profile chosen by the visitor (professionals, markets, consumers).	1 year
pll_language	This cookie saves the user’s language choice.	1 year

Performance cookies: Allow

Performance cookies help us collect anonymous statistical data such as the number of visits, the average time spent on the website or the pages consulted during a browsing session. The information is aggregated and anonymous, and allows us to monitor and improve the performance of our website.

Name	Description	Duration
_pk_id.#	Collects anonymous statistical data on the website consultations, such as the number of visits or the average time spent on the website. The data is processed in-house and is not shared with a third party.	1 year
_pk_ses.#	Collects anonymous statistical data for the tracking of the pages consulted during the browsing session. The data is processed in-house and is not shared with a third party.	30 minutes

SoundCloud: Allow

This content from a third party provider has been blocked. By allowing this content to load, you agree with the terms of SoundCloud's cookie usage and privacy policy