Agefi Luxembourg - avril 2025

Avril 2025 48 AGEFI Luxembourg Informatique financière 3 60 is celebrating its 25-year an- niversary. Jerome B LOCH , the founder, accepted to share his analysis of the past, and the future. Canyouwrapup25yearsinafewwords? Everythingstartedwithawilddream.Iar- rived in 1996 in Luxembourg as a very happy Golf Pinnovationsrofessional, but when I interacted on the golf course with communication professionals like Bob Kneip or Jean-Luc Mines, I realized that communication was my second dream beyond pushing a small golf ball in a dis- tant hole. 360 started with events in Lux- embourg, France and Belgium. It diversified into magazines in 2006 with Andy, that we created in Paris, which led toDuke, LuxembourgOfficial andcorpo- ratemagazines fullyfinancedby ads. Duringthe2008crisis,wewentfulldigital modewithMyOfficialStoryandwebroke the internet when we invented the www.360-box.comin 2017,anautomated, portable video studio that is a game changer for all our clients and for us. Be- forethat,avideorecordingusedtocostfar too much money and took up to 5 days. Now everything is immediate, for a few euros. Our LinkedIn reach alone went from500.000 to 15.000.000 in 3 years. Whichmajorevolutionsdidyouwitness in 25 years? 2000 sounds like 200 years ago. Files of 10MBwere sent by regular post on aCD- ROM. The print house made you choose your font by showing you characters made of lead. We used antiquities like a rolodex and had to travel hundreds of miles to collect business cards. Inshort: itwas aworldwithout LinkedIn, Facebook, Salesforce, Dropbox, What- sApp, InDesign, Teams, and everything below. Clearly, 3 main innovations changed the game: # 1. The commoditization of publishing . We went straight from Gutenberg to Zuckerberg.In2000,aneditorortheWort decided if youwereworthyof publishing anything. Now, any individual, ASBL or company can deploy its own posts, TV programs or corporatemagazines and fi- nance themthrough ads. # 2. Data. It used to be rare and expen- sive, now everyone can get it, more or less for free. One example: for our Lux- embourgOfficial Top150, we crawl the entire Luxembourg Business Register. I can check inone clickhowany company in the country is doing, beyondanynon- sensical award or P.R. job. # 3A.I. of course. Are you not afraid to see your company impactedbyA.I.? It is exactly the opposite! 360 is being re- shaped byA.I. for the better.We use it at every level in total transparency: content generation, Data crawling, Video dub- bing, coding.Wewere thefirst topublish aParliamentaryvideoof our PrimeMin- ister, Luc Frieden, in English with his own voice, generated from a video recorded only in Luxembourgish. The secret of our resilience is that we never sell low added-value services: we refuse to do any third party posting on LinkedIn. Any community manage- ment. Any maintenance of websites. In short: We refuse to sell what we would not buy. Instead, we empower our clients with the proper tools and the proper training.Andwe build long last- ing relationships through high added- value services that generate ameasurable impact. Think “Strong accountability”. I havenevermet aCEOorMarketeerwho would refuse to spend10€on something that generates 30€ of value. A.I.issimplymakingourclientsmoreeffi- cient and enhances our long-term collab- oration! Because in the end, 25 years of entrepreneurship have taught me 2main lessons inbusiness: 1.Cultureisthemostpreciousassetofany company. 2. The only product that every company sells is trust. Anything you would do differently if youhad to start again? Everything! I did all the possible mis- takes. The “Atlas syndrome”, the “Lead by example nonsense”, the “Lack of focus”. But I get it: it takes time to build anything significant. And today, the whole team led by Carole Hoffmann is proud to start a new journey during the next decades of growth! Communication and growth in theA.I. age. Abonnement aumensuel (journal + éditiondigitale) 1an(11numéros)=55€abonnementpourLuxembourgetBelgique-65€pourautrespays L’édition digitale du mensuel en ligne sur notre site Internet www.agefi.lu est accessible automatiquement aux souscripteurs de l’éditionpapier. NOM:....................................................................................................................................................................... ADRESSE:.............................................................................................................................................................. LOCALITÉ:............................................................................................................................................................ PAYS:....................................................................................................................................................................... TELEPHONE:...................................................................................................................................................... EMAIL:.................................................................................................................................................................... - Je verse ……€ au compte d’AGEFI Luxembourg à la BIL / LU71 0020 1562 9620 0000 (BIC/Swift : BILLLULL) -Jedésireunefacture :...................................................................................................................................... -N°TVA : ................................................................................................................................................................ Abonnement aumensuel en ligne Sivouspréférezvousabonnerenligne,rendez-vousàlapage‘S’abonner’surnotresiteIn- ternet https://www.agefi.lu/Abonnements.aspx Abonnement à notre newsletter / Le Fax quotidien (5 jours/semaine, du lundi auvendredi) Informations en ligne sur https://www.agefi.lu/Abonnements.aspx Abonnez-vous / Subscribe I nDecember 2024, the EuropeanSu- pervisoryAuthorities (ESAs) publi- shed the final Implementing Technical Standards (ITS) for theRegis- ter of Information (RoI) asmandatedby theDigital Operational ResilienceAct (DORA). This register is crucial for fi- nancial entities, as it details their contractual arrangementswith ICT third-party service pro- viders, enabling effective monitoring andmanage- ment of ICT-related risks. The ITS outlines the content, format, and tem- plates required formaintai- ning these registers, ensuring compliance and enhancing the digital opera- tional resilience of the EU financial sector. WhileitsgoalistoenhancetransparencyandICTrisk management, the implementation of the RoI has re- vealeda series of hidden challenges that financial en- titiesmust urgently address. Anewregulatory requirement withunforeseen complexity Many financial entities initially expected the RoI to be a simple extension of their existing outsourcing registers, but the reality is far more complex. The RoI demands a much higher level of granularity, requiring entities to map not only ICT third-party providers but also the connections between busi- ness functions, ICT services, contractual agree- ments, and the chain of subcontractors. This detailed level of reporting is far more demanding than previous regulatory requirements, making compliance a significant operational challenge. During the dry run exercise proposed by the Euro- peanSupervisoryAuthorities (ESAs), entities strug- gled with the 15-sheet Excel format mandated for the register. The complexity ofmanually gathering, structuring,mapping, andmaintaining this volume of dataquicklybecame evident. Everymodification, whether a simple contract update, a new subcontractor, or the removal of an ICT service or business function, necessitates multiple changes across interconnected tables.Managing thisprocess efficiently is a daunting task, particularly for large groups with hundreds of ICT providers and global operations. Unlike static regulatory re- ports, the RoI requires con- tinuousupdates.Supervisory authorities may request tar- geted extracts of the register, such as consolidated registers at the sub-group level or records of contracts supporting critical business functions for a specific entity, or lists of critical functions supported by specific ICT service providers. Entities must ensure that their data remains accu- rate, up-to-date, and easily retrievable at all times. This requires seamless coordination between busi- ness, IT, legal, procurement, and risk management teams; a challenge in itself given the volume of in- formationand thenumber of stakeholders involved. Adding to the complexity, there is no prescribed methodology for identifying and categorising business functions. Entities must independently define their criteria and indicators, all whilemain- taining consistency across multiple legal entities and jurisdictions. DORARegister of Informationpoweredby SpikeReply andBusiness Elements Reply Given the scale of the challenge, manual data man- agement is simplynot sustainable. Recognising this, SpikeReplyandBusinessElementshavedeveloped a tool to maintain the RoI; a Microsoft Power Plat- formApps designed to streamline compliance and ease the burden of maintaining this register. This tool automates data entry and updates, reduc- ingmanual errors andworkload. It integrates seam- lesslywithOffice 365 andCopilot, hostedonAzure, it ensures security and accessibilitywhile providing workflow automation for ICT providers manage- ment and oversight. Advanced reporting and ana- lyticsviaPowerBIenableentitiestoidentifyandthus manage their risks, and respond efficiently to re- quests fromCompetentAuthorities. While the Register of Information presents signifi- cant challenges, it alsosignals a shift inhowfinancial entitiesmust leverage technology to stayahead. The essence of the regulation is making use of the infor- mation available in the RoI, not only filling it. The rise of AI-powered solutions is transforming data management, compliance, and risk oversight, offering financial organisations an opportunity to modernise their toolbox. Maxime HENNAU, Senior Manager Estelle FREMAUX, Associate Partner, Reply Luxembourg The hidden challenges of DORA’s Register of Information L e lundi 31mars 2025, DEEP by POSTGroup et OVH- cloud ont officiellement signé unpartenariat stratégique pour lamise enœuvre d’unCloud souverain à Luxembourg, enpré- sence notamment duministre de l’Économie, des PME, de l'Énergie et duTourisme, LexDelles. S‘appuyant sur les solutions d’OVHcloud, DEEP entend offrir à ses clientsuneoffre cloudrépondant auxcri- tères les plus élevés en matière de pro- tection des données et de sécurité, spé- cialement adaptée au marché luxem- bourgeois, avec un lancement commer- cial prévu avant la fin de l'année 2025. Le Cloud souverain DEEP s’appuiera sur la solutionOn-PremCloudPlatform (OPCP) d’OVHcloud : une plateforme cloud intégrée qui sera, enmode décon- necté, hébergée et opérée de façon auto- nomeparDEEPdans sespropres centres de données certifiés « Tier IV » situés au Luxembourg. À noter que des premiers équipementsOVHcloudsont déjà instal- lés endémonstrationdans undatacenter de DEEP, démontrant ainsi la solidité et la fiabilité de cette collaboration. LesservicescloudproposésparDEEPqui s’appuient sur la solution OPCP d’OVHcloudpermettrontauxentreprises et organisations luxembourgeoises d’hé- bergerleursdonnées,notammentlesplus sensibles, sur une infrastructure dotée d’une puissance de calcul adaptée à de multiplesbesoins,dustockagededonnées et d’applicationsmétiers jusqu’auxusages de l’intelligence artificielle. En plus du stockage sécurisé et déconnecté, un éven- tail d'applications souveraines sera mis à disposition des clients, offrant une variété d'outils et de services développés par des partenaires européens. Ces applications permettront de traiter, exploiter et trans- former les données, tout en garantissant la conformité aux normes de sécurité et protectiondes données. Le Cloud souverain viendra compléter les offres existantes de cloud privé et public proposées par DEEP, offrant ainsi une gamme complète aux besoins variés des entreprises luxembourgeoises. Mise en œuvre d’un Cloud souverain à Luxembourg De gauche à droite : LexDelles, BenjaminRevcolevschi (OVH), Claude Strasser (POST)