Search Results for “Information and communications technology (ICT)” – Page 2

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents

Lien

Link

CSSF circular

Published on 05.01.2024

Circular CSSF 24/847

on ICT-related incident reporting framework

PDF (300.89Kb)

PDF (213.33Kb)

Communiqué

Published on 16.10.2024

Reminder of the procedures of transmission for Key Information Document (KID) and official documents (MR/AI)

(published on 16 September 2024, updated on 16 October 2024)

Page

Technical document

Updated on 24.01.2025 - Published on 20.11.2024

User Guide – Key Information Document

Version 1.2

PDF (1.23Mb)

Guidelines

Published on 28.11.2019

The EBA Final Guidelines on ICT and security risk Management

EBA/GL/2019/04

Link

Communiqué

Published on 21.01.2022

White paper – Distributed Ledger Technologies (DLT) and blockchain

Technological risks and recommendations in the financial sector

Page

Studies and reports

Published on 17.07.2024

Joint Guidelines on oversight cooperation

Communiqué

Published on 15.10.2020

Designation of Operators of Essential Services

Page

Communiqué

Published on 05.07.2024

Public Consultation and Feedback Period for Implementing Regulation laying down rules for the application of Directive (EU) 2022/2555 (NIS2 Directive) as regards technical and methodological requirements of cybersecurity risk management measures and further specification of the cases in which an incident is considered to be significant

Page

Name	Description	Duration
cssf_cookies	Saves information regarding the user's consent to the use of cookies for each optional category.	1 year
ROUTEID	Technical cookie allowing load distribution.	Deleted when the browsing session ends
TBMCookie*	Security: This cookies protects the website against automated attacks.	Deleted when the browsing session ends
__utmvc	These first party cookies are set by a third party service to filter out malicious requests.	Deleted when the browsing session ends
__utmvm*	These first party cookies are set by a third party service to filter out malicious requests.	15 minutes

Name	Description	Duration
cssf_profile	This cookie adapts the website pages to the profile chosen by the visitor (professionals, markets, consumers).	1 year
pll_language	This cookie saves the user’s language choice.	1 year

Name	Description	Duration
_pk_id.#	Collects anonymous statistical data on the website consultations, such as the number of visits or the average time spent on the website. The data is processed in-house and is not shared with a third party.	1 year
_pk_ses.#	Collects anonymous statistical data for the tracking of the pages consulted during the browsing session. The data is processed in-house and is not shared with a third party.	30 minutes

Search Results for Information and communications technology (ICT)

Advanced filters

132 Result(s)

Communiqué regarding new reporting procedure for ICT-related incident reporting according to Circular CSSF 24/847

Final report on draft ITS on Register of Information

Joint Guidelines on the estimation of aggregated costs and losses caused by major ICT-related incidents

Publication of a new notification template for critical or important ICT outsourcing

Joint RTS on subcontracting ICT services supporting critical or important functions

Summary table of information systems for external use (Reference RD-16)

Summary table of information systems for internal use (Reference RD-11)

CSSF FAQ related to Circular CSSF 24/847 on ICT-related incident reporting framework

Notification of critical or important ICT outsourcing

Listen to Kathrin Moules, Deputy Head of the CSSF’s Supervision of Information Systems and Support PFS department, speak about the challenges addressed by Circular CSSF 21/769 on telework

Financial transaction fraud after system compromise via Remote Management and Monitoring (RMM) tools

Commission Delegated Regulation (EU) 2024/1772 of 13 March 2024

Circular CSSF 24/847

Reminder of the procedures of transmission for Key Information Document (KID) and official documents (MR/AI)

User Guide – Key Information Document

The EBA Final Guidelines on ICT and security risk Management

White paper – Distributed Ledger Technologies (DLT) and blockchain

Joint Guidelines on oversight cooperation

Designation of Operators of Essential Services