When can CySEC step in early at a weakening CIF, and what can it require?
What allows CySEC to intervene early, the warning signs and the 1.5-point indicator, the measures it can require, removal of management, and the new rules due in 2028.
By the ExamPass CY editorial teamLast reviewed 7 min read
Topic 3 of 7 · all topics in this chapter
Short answer
CySEC may intervene early if a CIF breaches, or is likely soon to breach, the prudential rules, the Investment Services Law, MiFID II or MiFIR. Warning signs include worsening liquidity, rising leverage, non-performing loans and concentrated exposures, and the triggers may include own funds falling to 1.5 percentage points above the requirement. CySEC can require the firm to use or update its recovery plan, draw up an action programme, call a shareholders' meeting, replace unfit managers, plan a debt restructuring, or change its strategy or structure. It informs the resolution authority without delay.
Early intervention at a glance
| Point | Rule |
|---|---|
| Condition | The CIF infringes, or is likely in the near future to infringe, the CRR or IFR, the Investment Services Law, MiFID II Title II or listed MiFIR articles |
| Warning signs | A rapidly deteriorating financial condition, such as worsening liquidity, rising leverage, a build-up of non-performing loans or concentrated exposures |
| 1.5-point indicator | One trigger a set may include: own funds down to 1.5 percentage points above the requirement |
| Recovery plan | Implement its measures, or update it where circumstances differ from its assumptions and implement it within a set time |
| Owners and managers | Action programme with a timetable; convene a shareholders' meeting (CySEC may convene it directly and set the agenda); remove or replace unfit directors or senior managers |
| Debts, strategy, structure | Plan for negotiating a debt restructuring; changes to business strategy; changes to legal or operational structures |
| Preparing for resolution | Require what the resolution authority needs to update its resolution plan and value assets and liabilities, and pass it on |
| Notice and deadlines | Resolution authority informed without delay once the conditions are met; CySEC may set a deadline for each measure |
| Next steps | Removal of senior management or the whole management body if the measures fall short (new appointees need CySEC approval); then a temporary administrator |
Source: Law 20(I)/2016, sections 18, 19 and 21; Directive 2014/59/EU (BRRD), Articles 27, 28 and 30; Regulation (EU) 2019/2033 (IFR), Article 65.
In the exam
The exam is written from the exam material, which predates the changes below. Expect its answer. If that answer is not among the options and the current rule is, choose the current rule.
Early intervention condition
Exam material: CySEC may act when a CIF breaches, or is about to breach, its own funds requirement, judged on triggers such as own funds +1.5%.
Current law (since 18 March 2016 (Law 20(I)/2016)): An actual or likely breach of the prudential rules, the Investment Services Law, MiFID II or listed MiFIR articles is enough. Own funds at 1.5 percentage points above the requirement is one trigger a set may include.
What allows CySEC to intervene early?
Early intervention sits between normal supervision and resolution. CySEC may act if a CIF infringes, or is likely in the near future to infringe, the prudential rules (the CRR or, for most CIFs, the IFR), the Investment Services Law and its directives, Title II of MiFID II or listed articles of MiFIR. The breach need not concern capital: conduct and market rules count too. Likelihood is judged, among other things, by a rapidly deteriorating financial condition, for instance worsening liquidity, a rising level of leverage, non-performing loans or a concentration of exposures.
The assessment rests on a set of triggers, which may include own funds at the own funds requirement plus 1.5 percentage points. The exam material frames early intervention around own funds and gives 'own funds +1.5%' as its example trigger. Since 18 March 2016, Law 20(I)/2016 has treated the 1.5 figure as one trigger a set may include, measured in percentage points above the requirement. It has also let likely breaches of conduct and market rules open the way to early intervention. For how the requirement is built, see What counts as own funds, and which capital ratios and buffers must be met? and What are the Pillar 1 risks, and how are credit, market and operational risk defined?
Terms used in this note
- Early intervention
- Action by CySEC at a CIF that is breaching, or likely soon to breach, key requirements, taken before resolution becomes necessary.
- Trigger
- An indicator, such as own funds close to the requirement, that helps CySEC judge whether a breach is likely.
- Percentage point
- The absolute difference between two percentages, as opposed to a relative change.
- Action programme
- A plan with a timetable, drawn up by the management body at CySEC's request, to overcome the problems identified.
What can CySEC require?
The law gives CySEC at least the following measures, on top of its other supervisory powers. It may require the management body to implement measures from the recovery plan, or to update the plan where circumstances differ from its assumptions and implement it within a set time; to examine the situation and draw up an action programme with a timetable; to convene a shareholders' meeting, for which CySEC may set the agenda and require certain decisions to be considered; to remove or replace directors or senior managers found unfit for their duties; to draw up a plan for negotiating a restructuring of debt with some or all creditors; to change the business strategy; and to change the legal or operational structure. CySEC may also require, and pass to the resolution authority, the information needed to update the resolution plan, prepare for a possible resolution and value assets and liabilities. The BRRD adds that it may gather this information through on-site inspections.
The exam material says the shareholders' meeting is convened with immediate effect. The law's point is who convenes, not how fast: since 18 March 2016 it has let CySEC require the board to call the meeting and, if the board does not, call it directly. In both cases CySEC may set the agenda.
The measures work through the firm's plans, owners, managers and structure. Suspending or withdrawing authorisation is a separate licensing power under the Investment Services Law (see When can CySEC suspend or withdraw a CIF's authorisation, and what happens to clients?), and resolution belongs to the CBC. Once the conditions are met, CySEC informs the resolution authority without delay, and it may set a deadline for each measure.
What happens if early intervention is not enough?
If the CIF's financial situation deteriorates significantly or there are serious breaches, and the measures above are not enough, CySEC may require the removal of the senior management or the management body, as a whole or individually. The new members need CySEC's approval. If replacing management is not enough either, CySEC may appoint one or more temporary administrators (see Who appoints a temporary or a special administrator, and what can each one do?). Where a group is involved, CySEC notifies the EBA and consults the other competent authorities. If several authorities plan measures or a temporary administrator for more than one group entity, they aim for a joint decision within five days. If a matter is referred to the EBA, it decides within three days.
How to think about it
Picture a ladder. On the lower rungs CySEC works through the firm: use or update the recovery plan, draw up an action programme, call the shareholders, plan a debt restructuring, change strategy or structure. If that fails, it removes the management; if that fails too, it appoints a temporary administrator. Only when the firm is failing or likely to fail does the matter move to the CBC for resolution. The condition is any likely breach of key rules, not only of capital, and 1.5 points is one possible trigger.
Common mistakes
Reading early intervention as a capital-only test. Likely breaches of the Investment Services Law, MiFID II or MiFIR can trigger it too.
Treating 1.5 as a fixed legal threshold. It is one trigger a set may include, and it means percentage points above the requirement.
Mixing early intervention with licence or resolution powers. Suspension or withdrawal of authorisation sits in the Investment Services Law, and the resolution tools belong to the CBC.
Skipping rungs of the ladder. Removing the whole management comes when the ordinary measures are insufficient, and a temporary administrator when replacing management is insufficient.
Legal references
- The Recovery of CIFs and Other Entities under the Supervision of CySEC Law of 2016 (Law 20(I)/2016), consolidated Greek text on CyLaw (amendments up to Law 13(I)/2025) (opens in a new tab)
Section 18 (early intervention measures) · Section 19 (removal of senior management and management body) · Section 21 (groups)
- Directive 2014/59/EU (Bank Recovery and Resolution Directive, BRRD), consolidated version of 11 May 2026 (opens in a new tab)
Article 27 (early intervention measures) · Article 28 (removal of management) · Article 30 (groups)
- Regulation (EU) 2019/2033 on the prudential requirements of investment firms (IFR) (opens in a new tab)
Article 65 (references to the CRR in other Union acts read as references to the IFR for investment firms)
- Directive (EU) 2026/806 amending the BRRD (crisis management and deposit insurance reform, CMDI) (opens in a new tab)
Article 1(13) (new BRRD Article 27, applying from 12 May 2028)
Practise this topic
Test what you just read
The Chapter 11 pack has 108 exam-style questions, 7 of them on this topic. Every question has a hint before you answer and a full explanation after.
Or revise the numbers first with 30 free Chapter 11 flashcards →