Operational Resilience / Outsourcing in Netherlands
Operational Resilience / Outsourcing regulatory updates from Netherlands.
We track 17 Operational Resilience / Outsourcing updates from Netherlands regulators, published by AFM. The archive covers 8 reports, 6 guidance notes and 2 speeches. Most recent update: November 2026.
Financieel dienstverleners zetten AI steeds vaker in. Verantwoord gebruik vraagt daarom om duidelijke kaders. Tegelijkertijd blijven cyberdreigingen toenemen en vraagt de naleving van vergunningseisen om aandacht. Ook zien we een belangrijke rol voor financieel dienstverleners bij het versterken van de financiële…
Why this matters
The item is an AFM news piece presenting the findings of the 'Sector in beeld financieel dienstverleners' overview, so the content type is report. It covers AI governance expectations, cyber risk and outsourcing of critical ICT services, and the timely notification and fit-and-proper testing of daily policymakers.
Met nog een jaar te gaan tot de invoering van T+1-settlement op 11 oktober 2027 roept ESMA marktpartijen op hun voorbereidingen af te ronden, hun operationele gereedheid te beoordelen en zo snel mogelijk te starten met testen in de handels- en afwikkelingsketen. Met de publicatie van de laatste technische standaarden…
AI Analysis
AFM is relaying ESMA’s confirmation that the EU T+1 settlement framework is complete and that securities transactions will move from T+2 to T+1 on 11 October 2027. The immediate compliance priority is the first phased requirement, applying from 7 December 2026, for investment firms and their professional clients to exchange allocations and confirmations through electronic, standardised and machine-readable channels; industry commentary highlights material impacts on automation, matching, settlement instructions, custody, FX, liquidity and cross-border operating models.
Key dates
2026-12-07 Deadline
First phased requirements under the amended RTS on settlement discipline and related ESMA guidelines apply to allocations and confirmations, including electronic, standardised and machine-readable communications, subject to the temporary technical disruption exception.
2027-07-01 Deadline
Additional phased requirements under the amended RTS on settlement discipline become applicable, as specified in the regulation’s transitional provisions.
2027-10-11 Deadline
Regulation (EU) 2025/2075 applies and the EU standard securities settlement cycle changes from T+2 to T+1; the final phase of related settlement-layer requirements also applies.
Suggested considerations
Firms should map every affected transaction type, market, currency, venue, CSD, custodian, broker, client and outsourcing provider across the full trading and settlement ecosystem rather than assessing only internal readiness.
Compliance and operations teams may wish to confirm whether allocations and confirmations can be completed on trade date and transmitted through electronic, standardised and machine-readable channels from 7 December 2026, including accurate place-of-settlement data where required.
Firms should assess and test ISO or other applicable international messaging standards, matching platforms, standing settlement instruction governance, exception handling and the documented process for temporary technical disruptions.
Firms should identify manual processing steps that cannot reliably operate within the shortened timetable and consider automation, straight-through processing, reconciliation, controls over data quality and resilient fallback arrangements.
Firms should obtain implementation commitments and test plans from clients, brokers, custodians, CSD participants, CSDs, CCPs, vendors and outsourcing providers, with evidence of end-to-end testing and defect remediation.
Firms should review liquidity, collateral, margin, FX funding, corporate-action, securities-lending, fund dealing and investment-operation processes for the reduced interval between trade and settlement.
Firms should maintain a regulatory change plan covering the phased milestones on 7 December 2026, 1 July 2027 and 11 October 2027, with senior management oversight, documented risk acceptance and escalation of unresolved dependencies.
What changed
Regulation (EU) 2025/2075 amends Regulation (EU) No 909/2014 (CSDR) and provides for the EU settlement cycle to apply on a T+1 basis from 11 October 2027. Commission Delegated Regulation (EU) 2026/1536 amends the RTS on settlement discipline in Commission Delegated Regulation (EU) 2018/1229, with phased application beginning on 7 December 2026. From 7 December 2026, the allocation and confirmation process must use electronic, standardised communication channels and international messaging standards, with machine-readable communications required except during temporary technical disruptions.
Compliance impact
This is a high-priority operational and regulatory change rather than merely a future-market convention: the 7 December 2026 allocation and confirmation requirements are binding requirements under the amended settlement-discipline framework, while the 11 October 2027 T+1 date is established by Regulation (EU) 2025/2075.
Waarover maken pensioenspecialisten zich concreet druk in de pensioentransitie? En welke tip hebben ze voor de AFM? In deze interviewserie stellen we drie vaste vragen aan een pensioenprominent. Vandaag Daan Kleinloog, die afgelopen zomer plaatsmaakte voor Gisella Eikelenboom als voorzitter van het Koninklijk…
Why this matters
The item is an AFM-published interview, which falls under 'speech' as an official statement by a named individual. It covers pension funds (Insurance & Pensions) and their dependence on pension administration organisations (PUOs), including outsourcing, lack of market competition, and bundled service arrangements,...
Financial institutions are becoming increasingly dependent on digital systems. At the same time, the risks of disruptions are rising due to cyberattacks, geopolitical tensions, and the growing complexity of IT landscapes. A rapid and effective recovery of IT systems is essential to maintaining service availability for…
Why this matters
This is a regulatory intelligence report from the AFM (Netherlands Authority for the Financial Markets) examining IT recovery preparedness among large institutional asset managers. The content is informational in nature—presenting findings from a completed study rather than announcing new rules or enforcement actions.
"As Europeans, we all are in the same boat, and therefore we should act in unison," zei Hanzo van Beusekom op de tiende Annual European Compliance and Legal Conference. "Not just because ‘we all breath the same air and we are all mortal’, as President John. F Kennedy once said. But also because we are all part of a…
Why this matters
This is a speech by AFM leadership at a compliance conference emphasizing the importance of unified European action on financial market regulation. The content references three themes—Resilience, AI, and Europe—and five conditions for centralized supervision, but provides no specific rules, guidance, or enforcement...
Interne auditfuncties bij financiële ondernemingen worden steeds professioneler. Uit onderzoek van de Autoriteit Financiële Markten (AFM) bij zes grote banken, vier verzekeraars en vijf grote financieel dienstverleners blijkt dat zij in toenemende mate investeren in onafhankelijke toetsing. We moedigen ondernemingen…
Why this matters
This is a regulatory guidance document from the AFM (Dutch financial regulator) presenting findings from a market survey on internal audit functions. It identifies expectations for banks, insurers, and financial service providers regarding independent testing and governance controls.
The financial sector has made major progress since the introduction of the Digital Operational Resilience Act (DORA). At the same time, as a result of its supervision and requests for information, the Dutch Authority for the Financial Markets (AFM) has identified areas requiring further action from financial…
Why this matters
AFM regulatory update on DORA compliance progress and implementation gaps. Informational content summarizing sector-wide developments, compliance improvements (94% register approval), and areas requiring attention (incident reporting, policy documentation, threshold calculations).
Op 11 oktober 2027 stappen de financiële markten in de Europese Unie over op een T+1-afwikkelingscyclus. De Europese Commissie heeft inmiddels de detailregels voor deze overgang vastgesteld. Daarom vraagt de AFM marktpartijen om verder te gaan - of te starten - met de T+1-voorbereidingen. Financiële ondernemingen die…
Why this matters
AFM announcement regarding T+1 settlement cycle transition scheduled for October 11, 2027 in the EU. Informational guidance on regulatory requirements and implementation deadlines (December 7, 2026 and October 11, 2027).
Many fund managers have their compliance and internal audit functions well organised. Nevertheless, improvements are needed. For example, documentation is not always up to date, fund managers do not always retain sufficient control when outsourcing, and decisions based on proportionality are often insufficiently…
Why this matters
AFM guidance on compliance and internal audit function improvements for fund managers. Addresses documentation quality, outsourcing oversight, and proportionality justification. Informational supervisory guidance from European Common Supervisory Action (CSA) coordinated by ESMA.
Businesses procuring IT services should join forces more often, as this is key to strengthening their digital autonomy. Public authorities and businesses should make digital autonomy a core consideration in their procurement decisions, helping to drive the development of European digital services.
Why this matters
Dutch supervisory authorities' joint press release on digital autonomy and reducing IT service provider dependencies. Addresses operational resilience through supply chain risk management and cybersecurity considerations aligned with DORA and NIS2 Directive implementation.
Het Financieel Stabiliteitscomité (FSC) constateert tijdens zijn vergadering van 26 juni 2026 dat geavanceerde AI-modellen het cyberdreigingslandschap ingrijpend veranderen. Het FSC benadrukt dat financiële instellingen hun cyberweerbaarheid hierop moeten aanpassen en pleit voor sterkere coördinatie en betere…
Why this matters
FSC press release discussing AI-driven cybersecurity threats to financial stability, private credit growth monitoring, and resilience requirements. Informational statement from regulatory committee addressing systemic risks and coordination needs across financial sector.
De Autoriteit Financiële Markten (AFM) is een professionele en doelmatige toezichthouder die haar wettelijke taken doeltreffend uitvoert en aantoonbare resultaten boekt. Dat blijkt uit de onafhankelijke evaluatie van het functioneren van de AFM als zelfstandig bestuursorgaan (zbo) over de periode 2021–2025. In het…
Why this matters
This is an informational news article announcing the AFM's five-year regulatory evaluation results (2021-2025). The evaluation covers the AFM's supervisory effectiveness across multiple domains including crypto, cybersecurity, and sustainability. It is a positive assessment with recommendations for improvement.
In its SREP Market Overview 2025, the AFM notes that many firms have their foundations in order, but that implementation is lagging behind. Internal control and IT risks, in particular, require improvement. The message is clear: ensure that policies are not merely in place, but that they demonstrably work in practice.
Why this matters
AFM's SREP Market Overview 2025 provides regulatory guidance on implementation gaps in internal controls, IT risk management, and governance. This is informational content highlighting supervisory expectations rather than announcing new rules.
Advanced AI models can speed up the process of identifying and combining vulnerabilities. As a result, organisations have less time to address vulnerabilities and mitigate incidents. Small and medium-sized enterprises in particular, with less advanced security or older systems, may be relatively more vulnerable. The…
Why this matters
AFM speech addressing AI-driven cyber threats and resilience requirements. Applies broadly across financial services sectors with emphasis on vulnerability management, patch management, and incident response. Classified as informational/advisory content rather than binding regulation, hence null urgency.
Met een aantal aandachtspunten wil de Autoriteit Financiële Markten (AFM) financiële ondernemingen wijzen op de omgang met cliëntenonderzoek bij politiek prominente personen, politically exposed persons (PEPs). Uit een AFM-onderzoek blijkt dat ondernemingen bijvoorbeeld niet altijd maatwerk verrichten, terwijl elke…
Why this matters
AFM guidance on PEP (politically exposed persons) client due diligence procedures. Addresses AML/financial crime compliance with focus on risk-based approach, avoiding discrimination, proper definitions, outsourcing oversight, and staff training.
The escalation of the Middle East conflict leaves the global economy in a clearly worse state than previously expected. Higher inflation expectations, lower growth and heightened uncertainty are also affecting the financial sector, according to the annual Financial Stability Report from the Dutch Authority for the…
Vanaf 11 oktober 2027 verkort de afwikkelingscyclus voor effectentransacties van T+2 naar T+1. Dit vraagt om aanpassingen in systemen en processen in de hele kapitaalmarktketen. Om de voortgang te monitoren, roept de Autoriteit Financiële Markten (AFM) marktpartijen op om twee T+1-gereedheidsenquêtes in te vullen. Het…
Why this matters
AFM announcement regarding T+1 settlement cycle transition (from T+2 to T+1 effective October 11, 2027). Calls for market participants to complete readiness surveys by June 9, 2026.