2025-11-10
The Danish Financial Supervisory Authority issued this order to regulate system audits for operators of financial digital infrastructure, mandating both external and internal audit functions to ensure system, data, and operational security. It establishes strict requirements for auditor independence, reporting protocols, and the issuance of annual declarations regarding IT controls and risk management. The regulation further obligates operators to provide management statements to connected financial entities, enabling them to assess risks and implement compensating controls based on audit findings.