Derisk Advisory regularly shares thought leadership and insights on ICT, cybersecurity risk management, and regulatory developments to support organizations across industries in enhancing resilience and compliance.
Article 7 through 12 of 18 total articles
Shortly before the holiday season, BaFin published new Guidance on the ICT risks associated with the use of Artificial Intelligence (AI). While explicitly non-binding, this document provides essential practical orientation for financial institutions and insurance companies on how to integrate AI technologies into the Digital Operational Resilience Act (DORA) framework.
Jan 5, 2026
The CSSF has published Circular CSSF 25/900, updating the annual reporting framework for UCI administrators (UCIAs) under Circular CSSF 22/811. The changes apply from 31 December 2025 and aim to simplify reporting while reflecting the EU framework on digital operational resilience.
Dec 17, 2025
The European Supervisory Authorities (EBA, EIOPA, and ESMA) have officially released the list of 19 ICT third-party service providers now designated as "Critical" (CTPPs) under the Digital Operational Resilience Act (DORA).
Nov 18, 2025
As part of the Members Day of the Ordre des Experts-Comptables (OEC) Luxembourg, Derisk Advisory recently had the pleasure of presenting to an audience of Luxembourg-based accountants and fiduciaries, addressing the critical cybersecurity challenges their profession faces.
Oct 17, 2025The Commission de Surveillance du Secteur Financier (CSSF) has published its Annual Report for 2024, offering a crucial overview of the challenges and priorities for Luxembourg's financial sector. In an environment marked by geopolitical uncertainty and rapid technological change, the report serves as an essential guide for navigating the regulatory landscape.
Aug 28, 2025
In June 2025, Derisk Advisory joined forces with DSM Avocats à la Cour to host a webinar on DORA and the practical implications of the new CSSF circulars.
Jun 3, 2025
