2026-03-31
The Dutch Financial Markets Authority (AFM) requires accountancy organisations to implement a robust, future-proof information security framework to mitigate vulnerabilities exposed by recent digital incidents and data breaches. The regulator emphasises that organisations must maintain up-to-date ICT risk registers, conduct comprehensive continuity and configuration management tests, and establish structured supplier and incident management processes. IT risk control will remain a regulatory priority in the coming years, with the AFM urging all firms to proactively strengthen their digital resilience and risk management maturity.