{"id":"circulars/cssf-25-897","title":"Circular CSSF 25/897","type":"circular","date":"2025-10-31","kind":"circular","html":"<p>Circular CSSF 25/897 is a CSSF circular, published 31 October 2025 and updated 3 November 2025. Subject: Update of Circular CSSF 22/821 on the Long Form Report, as amended by Circulars CSSF 23/845 and CSSF 24/865.</p>\n<p>Relevant for: Credit institutions.</p>\n<p>Keywords: AML/CFT, Approved statutory auditor (réviseur d'entreprises agréé), Credit risk, Depositary, eDesk, Information security, Internal governance, Payment services, Statutory auditor (réviseur d'entreprises).</p>\n<h2>Text</h2>\n<p>Circular CSSF 25/897 Update of Circular CSSF 22/821 on the Long Form Report (as amended by Circulars CSSF 23/845 and CSSF 24/865)</p>\n<p>Circular CSSF 25/897 Update of Circular CSSF 22/821 on the Long Form Report (as amended by Circulars CSSF 23/845 and CSSF 24/865) To all Luxembourg credit institutions and Luxembourg branches of non-EU credit institutions</p>\n<p>Luxembourg, 31 October 2025 Ladies and Gentlemen, The purpose of this circular is to amend Circular CSSF 22/821 on the long form report (LFR) with the aim to further align the content of the self-assessment questionnaire with supervisory points of focus. As a result, the following modules have been included in the revised SAQ: a.</p>\n<p>UCI administration</p>\n<p>European Market Infrastructure Regulation (EMIR)</p>\n<p>In addition, the “Credit risk – IFRS 9” and “DORA preparedness” modules have been removed from the SAQ. The latter has been integrated as part of the “IT risk” modules. Some existing modules have been updated either to better align with supervisory objectives or to request information in a more proportionate manner, according to the nature of banks’ activities. The list of modules in the self-assessment questionnaire and their descriptions have been removed from the circular and are now available on the CSSF website (<a href=\"http://www.cssf.lu/en/prudential-reportingcredit-institutions\" target=\"_blank\" rel=\"noreferrer\">www.cssf.lu/en/prudential-reportingcredit-institutions</a>). Please refer to Annex I for the details of the amendments to Circular CSSF 22/821 (as amended by Circular CSSF 23/285, 24/865 and 25/897). Yours faithfully,</p>\n<p>Annex: Circular CSSF 22/821, as amended by Circulars CSSF 24/865, CSSF 23/845 and 25/897</p>\n<p>Annex - Circular CSSF 22/821 as amended by Circulars CSSF 23/845, 24/865 and 25/897</p>\n<p>Long Form Report Practical rules concerning the self-assessment questionnaire to be submitted by institutions. Mission and related reports of the approved statutory auditors (réviseurs d’entreprises agréés). To all Luxembourg credit institutions and Luxembourg branches of non-EU credit institutions</p>\n<p>Luxembourg, 25 October 2022 Ladies and Gentlemen, Circular 22/821 published on 25 October 2022 introduced a revised version of the long form report following on from the regulatory developments and the evolving supervisory practices since 2001. The revision of the long form report as contemplated under Circular CSSF 01/27 was the result of a thorough reconsideration of its objective, scope and content in order to realign it with supervisory and prudential points of focus as well as to suppress redundancies between existing reporting requirements. The circular introduced a self-assessment questionnaire to be filled in on an annual basis by the institutions. It also introduced Agreed Upon Procedure report(s) and an annual separate report on the protection of financial instruments and funds belonging to clients as required under Article 7 of the Grand-ducal Regulation of 30 May 2018 to be established by the réviseurs d’entreprises agréés (REA) of the institutions. The self-assessment questionnaire and the Agreed Upon Procedure report(s) did not include matters relating to anti-money laundering and countering the financing of terrorism (AML/CFT) that have to be covered by the REA in its annual, separate report further to CSSF Regulation No 12-02. Following the revision of Circular 22/821 as amended by Circular CSSF 23/845, no more Agreed Upon Procedure reports are foreseen. As a result, the REA would only have to provide the annual separate report on the protection of financial instruments and funds belonging to clients as required under Article 7 of the Grand-ducal Regulation of 30 May 2018 as well as the annual separate AML/CFT report further to CSSF Regulation No 12-02.</p>\n<p>TABLE OF CONTENTS 1. Scope of application and legal basis ................................................................................. 3 2.</p>\n<p>The text above is the opening of the document; the PDF carries the whole.</p>\n<p><a href=\"https://www.cssf.lu/en/Document/circular-cssf-25-897/\" target=\"_blank\" rel=\"noreferrer\">Document page</a>, <a href=\"https://www.cssf.lu/wp-content/uploads/cssf25_897eng.pdf\" target=\"_blank\" rel=\"noreferrer\">PDF</a>. Source: Commission de Surveillance du Secteur Financier (CSSF), reproduced with the CSSF's consent. The French text prevails.</p>"}