Frameworks
Dutch financial compliance made easy with DNB ICT
DNB oversight is intensifying, and gaps in your ICT risk management put your institution at regulatory risk.
Tidal keeps you compliant and resilient. Implement ICT controls, manage third-party risks systematically, and exceed DNB expectations with proven operational resilience.
DNB ICT Guidelines in depth
The DNB ICT Guidelines describe how financial institutions should organise their ICT and information security under supervision of De Nederlandsche Bank. The guidelines focus on managing ICT risks, continuity, and governance, and form an important assessment framework within prudential supervision.
In practice, the DNB ICT Guidelines are often approached as interpretation of laws and regulations. This creates uncertainty about how ICT risks should be structurally managed and accounted for towards the supervisor.
By applying the DNB ICT Guidelines as a coherent supervisory framework, clarity emerges. ICT risks, processes, and responsibilities are explicitly organised and firmly established.
How Tidal helps you get certified
Hit the ground running
Start with our pre-built controls, policies, and risk assessment templates.
Our platform guides you through establishing your ISMS scope, identifying assets, and implementing right-sized controls that match your business needs.
Why Tidal Control
We understand your challenges because we've been there. Our team of GRC experts and security professionals built Tidal to solve the real problems compliance teams face every day.
Made in Europe
Built and hosted in Europe. Your compliance data stays in the EU for full control and peace of mind.
Continuous automation
Automated evidence collection from cloud providers and development tools working 24/7 for you.
Real security
Build secure systems that protect your business and satisfy auditors, not just check compliance boxes.
Go beyond DNB ICT Guidelines
Explore complementary frameworks that strengthen your financial institution's ICT resilience.
DORA
Meeting broader EU financial resilience requirements? DORA extends DNB ICT Guidelines across the EU with additional operational resilience requirements.
ISO 27001
Building foundational security for your bank? ISO 27001 provides information security controls that align with and extend DNB ICT requirements.
NIST CSF
Aligning with global financial security standards? NIST Cybersecurity Framework provides complementary guidance for managing ICT risks alongside DNB requirements.
RVIT
Protecting telecom-dependent operations? RVIT ensures security of telecommunications infrastructure that your financial systems rely upon.
Integrate with your existing tools
Learn more about DNB ICT Guidelines
Learn more about implementing and managing DNB ICT Guidelines
Testimonials
What our customers say
With a single click, one Tidal test checks dozens of disks for encryption. Doing that manually would take a lot of time.
Frequently asked questions
DNB ICT Guidelines are information security requirements from De Nederlandsche Bank for financial institutions under its supervision. This includes banks, insurers, pension funds, and payment institutions operating in the Netherlands.
Our platform provides pre-built controls aligned with DNB requirements, guides you through implementation of ICT risk management, and helps maintain evidence of compliance. We cover operational resilience, third-party risk, and incident management requirements.
Yes, our platform includes incident management tools that help you identify, respond to, and report ICT incidents in line with DNB requirements. We help you maintain incident documentation and meet reporting obligations.
Our platform guides you through DNB's cloud security requirements including risk assessment, contractual requirements, and oversight measures. We help you implement appropriate controls for cloud services and maintain evidence of compliance.
Yes, our platform organises your ICT risk documentation, maintains evidence of control effectiveness, and provides audit-ready reports. You'll have clear visibility of your compliance status and can quickly demonstrate adherence to DNB requirements during supervision.
Our platform automates monitoring of ICT controls, schedules required reviews and testing, and maintains evidence of continued compliance. You'll receive alerts for upcoming assessments and any gaps, helping you maintain regulatory compliance with less effort.