{"id":"circulars/cssf-20-758","title":"Circular CSSF 20/758","type":"circular","date":"2020-12-07","kind":"circular","html":"<p>Circular CSSF 20/758 is a CSSF circular on central administration, internal governance and risk management, published 7 December 2020.</p>\n<p>Legal basis: <a href=\"/lhoft?page=laws%2F1993-04-05-n1\" class=\"wikiLink\" data-target=\"laws/1993-04-05-n1\">Law of 5 April 1993 on the financial sector</a>.</p>\n<p>Relevant for: Investment firms.</p>\n<p>Main topic: MiFID II. Keywords: Accounting, Audit Committee, Central administration, Information and communications technology (ICT), Internal governance, Outsourcing, Risk management, Whistleblowing.</p>\n<p>Amended by <a href=\"/lhoft?page=circulars%2Fcssf-21-785\" class=\"wikiLink\" data-target=\"circulars/cssf-21-785\">Circular CSSF 21/785</a>.</p>\n<h2>Text</h2>\n<p>Circular CSSF 20/758 as amended by Circulars CSSF 21/785 and CSSF 22/806 Re: Central administration, internal governance and risk management Luxembourg, 7 December 2020</p>\n<p>Ladies and Gentlemen, Articles 17(1a) and 38-1 of the Law of 5 April 1993 on the financial sector (“LFS”),</p>\n<p>To all investment firms</p>\n<p>supplemented by Regulation CSSF No 15-02 relating to the supervisory review and evaluation (“RCSSF 15-02”) 1 require investment firms to have robust internal governance arrangements, which shall include a clear organisational structure with well-defined, transparent and consistent lines of responsibility, effective processes to identify, manage, monitor and report the risks to which they are or might be exposed, adequate internal control mechanisms, including sound administrative and accounting procedures and remuneration policies and practices allowing and promoting sound and effective risk management, as well as control and security mechanisms for their IT systems. This Circular specifies the measures investment firms must take pursuant to the provisions of the LFS and RCSSF 15-02 2 as regards central administration, internal governance and risk management. It reflects the European and international principles, guidelines and recommendations which apply in this respect, translating them, in a proportionate way, in the context of the Luxembourg financial sector. Where, due to the size, the nature and the complexity of the activities and the organisation, the application of the principle of proportionality requires enhanced central administration, internal governance or risk management, the institutions shall refer to the principles set out in Chapter 2 of Part I and to the abovementioned guidelines and recommendations for guidance on this implementation. This concerns especially the European Banking Authority (“EBA”) Guidelines on internal governance (EBA/GL/2017/11) and the joint EBA and the European Securities and Markets Authority (“ESMA”) Guidelines on the assessment of the suitability of members of the management body and key function holders (EBA/GL/2017/12). This Circular repeals and replaces Circular CSSF 12/552 on central administration, internal governance and risk management (as amended by Circulars CSSF 13/563, CSSF 14/597, CSSF 16/642, CSSF 16/647, CSSF 17/655 and CSSF 20/750) with regard to investment firms.</p>\n<p>RCSSF 15-02 only applies to CRR institutions, i.e. to credit institutions and CRR investment firms.</p>\n<p>Idem</p>\n<p>As regards the appointments of directors, authorised managers and key function holders, this Circular should be read in conjunction with the Prudential Procedure in this respect published on the CSSF website. The Circular is divided into four parts: the first part contains definitions and establishes the scope, the second part is dedicated to central administration and internal governance requirements, the third part covers specific risk management requirements and the fourth part provides for the entry into force of this Circular.</p>\n<p>TABLE OF CONTENTS Part I - Definitions and Scope 7 Chapter 1. Definitions and abbreviations 7 Chapter 2. Scope and proportionality 9 Part II. Central administration and internal governance arrangements 11 Chapter 1. Central administration 11 Chapter 2. Internal governance arrangements 11 Chapter 3. General characteristics of “robust” central administration and internal governance arrangements 13 Chapter 4. Board of Directors and authorised management 14 Sub-chapter 4.1. Board of Directors 14 Section 4.1.1. Responsibilities of the Board of Directors 14 Section 4.1.2.</p>\n<p>The text above is the opening of the document; the PDF carries the whole.</p>\n<p><a href=\"https://www.cssf.lu/en/Document/circular-cssf-20-758/\" target=\"_blank\" rel=\"noreferrer\">Document page</a>, <a href=\"https://www.cssf.lu/wp-content/uploads/cssf20_758eng.pdf\" target=\"_blank\" rel=\"noreferrer\">PDF</a>. Source: Commission de Surveillance du Secteur Financier (CSSF), reproduced with the CSSF's consent. The French text prevails.</p>"}