Derisk Advisory regularly shares thought leadership and insights on ICT, cybersecurity risk management, and regulatory developments to support organizations across industries in enhancing resilience and compliance.
Article 1 through 6 of 18 total articles
The CSSF's 2025 annual report puts frontier AI at the centre of its supervision agenda. This analysis unpacks the report's key findings, from DORA's first-year incident data and the new TLPT regime to the AI Act's evolving timeline and sharpened IT inspection expectations, and distils them into three priorities for 2026.
Sep 6, 2026
European regulators have signalled that the traditional remediation window can no longer be treated as a dependable control. This article examines what the coordinated ESRB, ECB, and CSSF communications on Frontier AI mean for cyber resilience, vulnerability management, containment, and board-level oversight under DORA.
Jul 8, 2026
The ESAs have published their first comprehensive report on major ICT-related incidents reported under DORA. Documenting 3,383 major incidents across the EU financial sector during 2025, this data establishes an empirical baseline for operational resilience.
Jun 3, 2026
On 6 May 2026, the Luxembourgish government published the law officially transposing the EU's NIS2 Directive into national legislation. As a direct implementation of the European framework, the new law integrates the EU-wide cybersecurity baselines into our national context, establishing clear regulatory oversight for essential and important entities operating in the Grand Duchy.
May 8, 2026Anthropic’s April 7 technical post on the Claude Mythos Preview makes an extraordinary claim. The company states the model can autonomously identify and exploit both zero-day vulnerabilities and N-day vulnerabilities. They describe these capabilities as a watershed moment for cybersecurity.
Apr 9, 2026
This interview with our principal consultant, Laurent de la Vaissière, first appeared in the 39th edition of Andy à Luxembourg. We are grateful to Sylvain Aubry and the Association of Luxembourg Compliance Officers (ALCO) for this exchange, which we have translated below for our international readers.
Jan 29, 2026
