Strengthening Risk Management: MFSA’s Expectations for CSPs
On the 25th of November 2025, the Malta Financial Services Authority (“MFSA”) issued a ‘Dear CEO letter’ to communicate the results of a thematic review of the risk management function of Class C Company Service Providers(“CSPs”). This letter forms part of the MFSA’s wider supervisory drive to enhance governance, culture and resilience across the sector. Although the review is focused on a selected sample, the expectations outlined are relevant to all CSPs authorised in Malta. Under the Company Service Provider Rulebook (“the Rulebook”), CSPs must maintain a risk management framework that allows them to identify, analyse and evaluate risk, by…
Rachel Gauci16th December 2025

