The classic trap
Section 6.1.1 requires that first-level control, the one performed by staff on their own operations, be daily, documented and traceable. What the CSSF sanctions during on-site inspections is not the absence of a procedure, but the absence of proof that these daily controls actually took place: a cash balance reconciled but not timestamped, suspense items tracked "from memory", trader positions verified with no trace. When an error or omission is detected late, the CSSF reclassifies that gap as a failure of the internal control framework under circular 20/758, with a direct impact on the assessment of Senior Management and the Compliance function.
The evidence the CSSF actually expects
- A timestamped trace of each daily control (cash balance, positions, suspense items), attributed to a named individual.
- A documented escalation mechanism as soon as an error or omission is detected, with a resolution deadline.
- Suspense tracking per staff member, with age and status, never left to oral declaration.
- Proof that the control is performed the same day, not caught up at week end before an inspection.
- Real coverage of all relevant staff, with no blind spot on new joiners or stand-ins.
The structural weak point is the gap between the written procedure and operational reality. A perfect procedure on paper is worthless without an opposable execution log.
How Luxgap automates this risk
Our Luxgap Daily Control Ledger turns first-level daily control into timestamped, opposable evidence, without relying on each operator's declarative goodwill. The tool connects to your core banking system, Sage BOB 50, your treasury and trading systems, and to M365 and Active Directory to automatically reconstruct who controlled what, and when, based on operations that were actually processed.
- Detects each daily operation executed (cash, position, transaction) and generates the corresponding daily control task per operator.
- Timestamps and cryptographically seals each control validation, with named attribution pulled from your Active Directory.
- Tracks suspense item age in real time and alerts via Teams as soon as an item exceeds the tolerance threshold defined in your procedure.
- Automatically escalates any unresolved error or omission to the next level, with a resolution clock.
- Identifies blind spots: operators with no control recorded the same day, uncovered new joiners, forgotten stand-ins.
- Produces a timestamped PDF report opposable to the CSSF, demonstrating the reality and completeness of daily controls over any inspected period.
Available as a complement to a Luxgap CISO or DPO mandate or as a dedicated SaaS module depending on your scope. Request a tailored quote and our teams will prepare a demonstration on your real operations, with a free blank audit within 48h to measure your exposure before any commitment.
