Thematic reviews and common supervisory actions
The three stage cycle that turns a published priority into a question on your desk, and the feedback report that tells you what the supervisor found in entities like yours.
- The video of every lesson, and the word-for-word transcript beside it
- Every claim linked to its primary source, with a source register per lesson
- An assessment for each of the 6 modules, and an end-of-course assessment
- A printable certificate carrying your name, the date and the content version
- The downloadable artefacts and one page references for this course
Expensing it? The invoice can be made out to your firm, with its VAT number and your purchase order reference. Buying for several people: seats for a team.
The narrated video runs about 45 minutes across the 18 lessons. That is short on purpose: no filler and no reading out of the law, with the work in the transcripts, the sources, the assessments and the artefacts.
Module 6. The obligations that catch people out
Notifying a major information and communication technology incident under DORA and Circular CSSF 25/893, the three stage cycle that turns a published priority into a thematic review or a common supervisory action, and the whistleblowing channel that obliges you to build something whether or not anybody ever uses it. Lesson 6.1, ict incidents and dora. Lesson 6.2, thematic reviews and common supervisory actions. Lesson 6.3, the whistleblower, and what it obliges you to build.
Every instrument this lesson is built from, linked to its official text
The published priorities are the CSSF communication of 31 March 2026, which also announces the common supervisory action. The thematic review of the delegation of the portfolio management function is the worked example of the full cycle, and its feedback report of October 2024 is the document the lesson says is the most underused free material in Luxembourg supervision.
- The CSSF's 2026 priorities for supervising the investment fund sector, 31 March 2026 CSSF communication. The published priorities and the common supervisory action on the risk management function announced for the second half of 2026 https://www.cssf.lu/en/2026/03/the-cssfs-2026-priorities-for-supervising-the-investment-fund-sector/
- CSSF feedback report on the thematic review of the delegation of the portfolio management function by investment fund managers, October 2024 CSSF publication. The worked example of a thematic cycle: a review carried out over several years, a published feedback report of the findings, and a self assessment asked of managers afterwards https://www.cssf.lu/en/Document/cssf-thematic-review-on-the-delegation-of-the-portfolio-management-function-by-investment-fund-managers-ifms-cssf-feedback-report/
Module 6. The obligations that catch people out
- Lesson 6.1. ICT incidents and DORA 2:22
- Lesson 6.2. Thematic reviews and common supervisory actions 2:25 · this page
- Lesson 6.3. The whistleblower, and what it obliges you to build 2:23
Open this lesson
Access to CSSF Readiness: requests, inspections and observation letters opens the video, the word-for-word transcript, the module assessments and the certificates. If you already have access, sign in and this page becomes the lesson.
Or watch lesson 1-1 of this course free, with no account: CSSF Readiness: requests, inspections and observation letters, the free sample.