2026-03-31

Accountancy Organisations: Ensure an Appropriate Information Security Framework

The Dutch Financial Markets Authority (AFM) requires accountancy organisations to implement a robust, future-proof information security framework to mitigate vulnerabilities exposed by recent digital incidents and data breaches. The regulator emphasises that organisations must maintain up-to-date ICT risk registers, conduct comprehensive continuity and configuration management tests, and establish structured supplier and incident management processes. IT risk control will remain a regulatory priority in the coming years, with the AFM urging all firms to proactively strengthen their digital resilience and risk management maturity.

Autoriteit Financiele Markten logo

Netherlands

Autoriteit Financiele Markten

Click to view full text