KPMG Law LLP logo

23 September 2026

On 01 September 2026, the Central Bank of Ireland ("CBI") published its assessment in relation to the implementation of key aspects of the Fitness and Probity ("F&P") Regime within the MiFID investment firm sector, providing a timely reminder that regulatory compliance is no longer measured solely by the existence of policies and procedures. Instead, firms are expected to demonstrate that governance frameworks operate effectively in practice and that accountability is embedded throughout the organisation.

Findings

Some of the key findings of the assessment include:

1. Due diligence deficiencies

A number of firms were unable to evidence adequate due diligence at both onboarding and annual certification stages for pre-approval controlled function ("PCF") role holders.

Common weaknesses identified include:

  1. No signed confirmation in place from PCF holders agreeing to comply with the F&P Standards;
  2. Inadequate conflict of interest self-certification processes; and
  3. Lack of documentary evidence demonstrating assessment of competence and capability, such as interview notes or evaluation records.

Deficiencies in these areas expose firms to risks, potentially undermining consumer trust and systemic stability.

2. Individual Accountability Framework ("IAF")

Most firms had updated policies and delivered training following the introduction of the IAF.

Good practices observed included:

  1. Development of "Reasonable Steps Frameworks"; and
  2. Quarterly compliance attestations confirming Management Responsibility Maps ("MRMs") remained current.

It was found however that some firms had not sufficiently tailored their IAF implementation to their business model and instead were relying on generic policy language rather than demonstrating practical embedding of the framework. This is clearly an issue that the CBI would like addressed and firms should take note.

3. Senior Executive Accountability Regime ("SEAR") governance documentation

Most firms subject to SEAR maintained high-quality Statements of Responsibility ("SORs") and MRMs, however deficiencies identified included:

  1. Missing inherent or other responsibilities;
  2. Unclear reporting lines to senior management or Board committees; and
  3. Shared responsibilities that did not align with SEAR requirements and diluted individual accountability.

4. Minimum Competency Code ("MCC")

No material concerns were identified regarding MCC compliance, with firms generally maintaining appropriate registers and CPD records.

Next steps

To address the findings, MiFID investment firms should:

i. Increase their supervisory focus on evidence

The CBI is clearly moving beyond a paper compliance approach. Firms will be expected to demonstrate evidence that F&P, IAF and SEAR requirements are operating effectively in practice.

ii. Enhance due diligence and certification

Firms should undertake a review of onboarding and annual certification processes. Particular focus should be placed on documentation standards, evidence retention, competency assessments and conflict of interest declarations.

iii. Fully embed the IAF

Firms must be able to demonstrate how the IAF has been integrated into everyday governance and decision-making processes. Generic policies alone are unlikely to satisfy supervisory expectations.

iv. Ensure accountability under SEAR

Firms should seek to allocate prescribed responsibilities distinctly to individual PCF role holders, ensuring MRMs and SORs are up to date and reflect organisational roles accurately.

Overview

The 2026 Report highlights the CBI’s dedication to continuous review and improvement of the F&P gatekeeping regime. This, in turn, presents ongoing challenges to organisations to ensure that they remain up to date on requirements which will directly impact individuals holding key positions in their organisation.

In particular, compliance with the enhanced expectations for individuals holding senior roles as set out in the updated Guidance will be of continuing importance in order to comply with the ever-changing regulatory landscape.

The assessment clearly identified issues despite the regulatory framework being in place for some time. This now offers a good opportunity for firms to review their governance obligations and update if necessary.

How KPMG Law LLP can help

The Investment Funds & Asset Management team within KPMG Law LLP provide comprehensive legal services across fund formation, operations, regulatory compliance, and transactions.

Our Financial Services Regulatory team can also assist regulated entities in understanding and responding to their regulatory and supervisory priorities.

You may also be interested in the following related articles:

Contact our team

Ann-Marie Teehan

Ann-Marie Teehan

Director, Of Counsel, Head of Investment Funds

Derek Hegarty

Derek Hegarty

Partner, Head of Financial Services and Dispute Resolution

Nicola Munnelly

Nicola Munnelly

Director, Financial Services Regulation

Discover more in Financial Services Regulation