CSSF Supervisory Priorities 2026: What Fund Boards Should Ask

The CSSF published its 2026 investment fund supervisory priorities on 31 March. For Luxembourg fund boards, the useful question is where to spend their limited meeting time. Which risks deserve a deeper discussion, and what would demonstrate that the discussion led to action?

I would read the priorities alongside the sustainable-finance update of 2 March. Together, they offer a starting point for reviewing the board agenda. This article considers the implications for investment funds and investment fund managers (IFMs); the sustainable-finance communication also addresses other sectors.

What are the CSSF’s priorities for investment funds in 2026?

The CSSF identifies governance and operational risk, ICT and cyber risk, liquidity and credit risk, contagion and interconnectedness, valuation, sustainable finance, costs and fees, and money laundering, terrorist financing and proliferation financing. Its programme includes follow-up on compliance and internal audit, a second-half risk-management review, and a sample-based study of third-party oversight. These are supervisory priorities rather than a single new rulebook or a common compliance deadline.

My starting point would be a short paper identifying which areas matter most to the particular entity. A private-debt strategy and a liquid securities fund should arrive at different discussions. The board should be able to explain that choice.

Control functions: ask what remains unresolved

A board pack can contain a compliance report, a risk report and an internal audit update without giving directors a clear view of the problems. Findings may be spread across different reporting cycles. An overdue action can disappear into a revised delivery date.

I would ask for the oldest open findings, the reasons they remain open and the person responsible for resolving each one. Where management considers a finding closed, what evidence supports that conclusion? Has the relevant control function agreed?

There is also a capacity question. If the business has added products, investors or service providers, has the control team had the time and expertise to keep pace? A headcount figure alone will not answer it. Directors need to understand where work has been deferred and what that leaves unchecked.

Delegation and technology: test a dependency

The CSSF’s programme brings third-party oversight and DORA implementation into focus. For a board, I would turn that into a practical exercise: choose one important service and work through what happens if it becomes unavailable.

Who notices first? Who contacts the provider? What information reaches the IFM and the fund board? How long can the arrangement continue without the service, and has anyone tested the alternative? An exit clause is useful only if the business can carry it out.

The same exercise can expose an overlooked concentration. Several apparently separate providers may depend on the same technology supplier. I would want that dependency explained in terms of the activities affected, including valuation, dealing and investor reporting, rather than left as a technical diagram.

Liquidity and valuation belong in the same conversation

The CSSF plans further reviews of open-ended private-asset funds, private-debt credit processes and liquidity tools. Valuation scrutiny also continues, including on-site work and reviews involving continuation funds.

For directors, these subjects are closely connected. A redemption promise is only as credible as the assumptions supporting it. If assets take longer to sell, or sell below their last valuation, the consequences may fall differently on investors who leave and those who remain.

I would ask management to present a stressed redemption scenario alongside its valuation assumptions. Show the cash available, the time needed to realise assets and the decisions required from the board. Then explain how the outcome changes if financing becomes harder to obtain. Where relevant, include leverage and collateral demands in that discussion.

For private debt, the questions should reach beyond whether a payment has been received. Repeated covenant waivers, maturity extensions and changes to borrower forecasts deserve explanation. Directors should understand the judgement behind a valuation and where a different reasonable assumption would materially change it.

Boards considering more frequent investor access may also find the discussion in ELTIF 2.0: key governance takeaways useful.

Sustainable finance: follow a claim through to the portfolio

The March sustainable-finance update sets out a connected set of checks for asset management: sustainability risks in organisational arrangements, compliant pre-contractual and periodic disclosures, consistency across documentation and marketing, maintained website information, and alignment between portfolio holdings and what investors have been told. The CSSF also stresses that information submitted through its SFDR data collections must remain current.

I would begin with one claim that an investor actually sees. Trace it from the marketing material to the investment restrictions, the data used to monitor it and the latest portfolio report. Ask who is responsible when those sources disagree.

Suppose a fund promotes an environmental characteristic but relies on estimates for part of its portfolio. The board should understand the extent of those estimates, their limitations and what happens when better information becomes available. It should also know who checks that an amended disclosure reaches the website and the distribution team.

This is a manageable exercise for a board meeting. It gives directors something concrete to challenge and management a clear route for escalating weaknesses. An assurance that the documents have been legally reviewed leaves several operational questions unanswered.

Fees and financial crime: make exceptions visible

Costs and fees, and financial-crime risks, remain explicit priorities. In both areas, I would focus board reporting on exceptions and the judgements behind them.

For fees, take a material charge and follow it from the contractual basis through allocation and approval. If a cost is shared between structures, why is that allocation fair? If a performance fee is paid, can the board understand the calculation without reconstructing a spreadsheet?

For AML/CFT oversight, a useful report explains difficult cases, unresolved information gaps and decisions requiring escalation. A dashboard showing completed checks may give little insight into their quality. Directors should have enough information to understand the residual exposure and the reasoning behind accepting it.

What I would put on the next board agenda

I would ask management for a concise assessment against the priorities, with supporting evidence available for the areas carrying the greatest risk. Each proposed action should have an owner, a date and a clear description of what completion means.

The minutes should capture the material questions, the answers and any further work requested. At the following meeting, the board should return to those commitments. A priority that generates a presentation but never changes a decision has achieved very little.

For boards seeking an independent perspective on their oversight arrangements, my fund and board governance work starts with those practical questions.

Frequently asked questions

When were the CSSF’s 2026 supervisory priorities published?

The fund-sector priorities were published on 31 March 2026. The separate sustainable-finance update was published on 2 March 2026.

Should every board give each priority equal attention?

I would allocate time according to the entity’s activities and exposures, recording the reasoning and revisiting it when circumstances change.

What should directors ask management to prepare?

A focused assessment of relevant risks, unresolved weaknesses and proposed actions, supported by evidence that directors can examine and challenge.

Katia Ciesielska is an independent non-executive director based in Luxembourg. This article reflects the publications available as at 7 April 2026.