IT Outsourcing

Many Luxembourg actors commission other entities, whether internal or external to the group, to provide IT services in this area. Aware of this, the CSSF has identified IT and cyber security measures that pose material risks to individual entities and the market at large,  and is publishing a growing number of circulars on the topic. 

Our core services in this field are delivered by a strong team of regulatory and IT consultants, assisted by regulatory advisors and lawyers.

We provide:

• IT risk assessment according to ISO standards
• Drafting and review of policies and procedures
• Materiality assessments for IT outsourcing (cloud based or not)
• Our lawyers at Arendt & Medernach review IT and outsourcing contracts 
• CSSF submissions 
• Cloud register and outsourcing register completion and review