23 September 2026
On 01 September 2026, the Central Bank of Ireland ("CBI") published its assessment in relation to the implementation of key aspects of the Fitness and Probity ("F&P") Regime within the MiFID investment firm sector, providing a timely reminder that regulatory compliance is no longer measured solely by the existence of policies and procedures. Instead, firms are expected to demonstrate that governance frameworks operate effectively in practice and that accountability is embedded throughout the organisation.
Some of the key findings of the assessment include:
A number of firms were unable to evidence adequate due diligence at both onboarding and annual certification stages for pre-approval controlled function ("PCF") role holders.
Common weaknesses identified include:
Deficiencies in these areas expose firms to risks, potentially undermining consumer trust and systemic stability.
Most firms had updated policies and delivered training following the introduction of the IAF.
Good practices observed included:
It was found however that some firms had not sufficiently tailored their IAF implementation to their business model and instead were relying on generic policy language rather than demonstrating practical embedding of the framework. This is clearly an issue that the CBI would like addressed and firms should take note.
Most firms subject to SEAR maintained high-quality Statements of Responsibility ("SORs") and MRMs, however deficiencies identified included:
No material concerns were identified regarding MCC compliance, with firms generally maintaining appropriate registers and CPD records.
To address the findings, MiFID investment firms should:
The CBI is clearly moving beyond a paper compliance approach. Firms will be expected to demonstrate evidence that F&P, IAF and SEAR requirements are operating effectively in practice.
Firms should undertake a review of onboarding and annual certification processes. Particular focus should be placed on documentation standards, evidence retention, competency assessments and conflict of interest declarations.
Firms must be able to demonstrate how the IAF has been integrated into everyday governance and decision-making processes. Generic policies alone are unlikely to satisfy supervisory expectations.
Firms should seek to allocate prescribed responsibilities distinctly to individual PCF role holders, ensuring MRMs and SORs are up to date and reflect organisational roles accurately.
The 2026 Report highlights the CBI’s dedication to continuous review and improvement of the F&P gatekeeping regime. This, in turn, presents ongoing challenges to organisations to ensure that they remain up to date on requirements which will directly impact individuals holding key positions in their organisation.
In particular, compliance with the enhanced expectations for individuals holding senior roles as set out in the updated Guidance will be of continuing importance in order to comply with the ever-changing regulatory landscape.
The assessment clearly identified issues despite the regulatory framework being in place for some time. This now offers a good opportunity for firms to review their governance obligations and update if necessary.
The Investment Funds & Asset Management team within KPMG Law LLP provide comprehensive legal services across fund formation, operations, regulatory compliance, and transactions.
Our Financial Services Regulatory team can also assist regulated entities in understanding and responding to their regulatory and supervisory priorities.
You may also be interested in the following related articles: