How to comply with article III.4 of CSSF 20/758?

Question

I need to bring my Luxembourg organisation into compliance with article III.4 of CSSF 20/758 (CSSF 20/758). What are the concrete requirements, the sanctions, and how can Luxgap support me?

Accepted Answer

The classic trapLuxembourg private banking concentrates the risks the CSSF watches most closely: poorly documented client risk profiles, untraceable suitability of the service to the profile, and above all the lack of a consolidated view of the risks (lombard lending, concentration, counterparty, interest rate) carried by a single relationship. In practice, the CSSF sanctions institutions that manage client wealth without a risk management framework able to demonstrate, file by file, that each discretionary mandate or advice respects internal limits and the validated profile. Chapter 4 requires these activities to be integrated into the overall risk management framework, not treated as a commercial silo.The blind spots the CSSF targets in inspectionsLombard loans backed by portfolios concentrated on a few lines, without real-time collateral valuation or automated margin calls.Obsolete client risk profiles: the mandate keeps running, the profile dates back to onboarding five years ago.No reconciliation between internal risk limits (concentration, counterparty, interest rate) and the actual positions of discretionary mandates.Banking book interest rate risk not allocated to wealth management activities.Shadow banking exposure through funds or structures held in client portfolios, without quantitative limits.Incomplete audit trails linking the investment decision to the client profile and the applicable limit.How Luxgap automates this riskOur Luxgap Wealth Risk Sentinel makes it impossible for a management mandate to silently drift outside internal limits and the validated client profile. The tool connects to your core banking (Avaloq, Temenos, Olympic), your portfolio systems and your limit repositories, then continuously reconciles every real position with the documented risk profile and the concentration, counterparty, interest rate and shadow banking thresholds, without asking the risk manager to re-enter a single line.Automatically detects every limit breach (concentration, lombard credit, counterparty, shadow banking exposure) as soon as a position moves in the portfolio system.Recomputes lombard loan collateral in real time and alerts on Teams when coverage falls below the margin call threshold.Flags stale client risk profiles and blocks any new discretionary operation inconsistent with the validated profile.Computes the banking book interest rate risk allocated to mandates and applies the modified duration corrections expected by Chapter 6.Produces a time-stamped, sealed PDF report, enforceable before the CSSF, linking each investment decision to the client profile and the applicable limit.Available as a complement to a Luxgap CISO or DPO mandate or as a dedicated SaaS module depending on your scope. Request a tailored quote and our teams will prepare a demonstration on your real mandates, with a free blind audit within 48h to measure your exposure before any commitment.

Chapitre 4 - Gestion de fortune et activités associées

They trust us

Before we chat