New EU regulation adds requirements on ICT risk, cybersecurity and sustainability reporting. I help you translate them into clear responsibilities, processes and controls that auditors and supervisors can test.

 

What I can do for you

• DORA (Digital Operational Resilience Act): ICT risk management framework, incident reporting, ICT third-party risk and register of information, resilience testing

• NIS2: cybersecurity governance, risk management measures and board accountability

• CSRD: internal control over sustainability data and readiness for limited assurance

• Also experienced with GDPR and MiFID II

• Integrate new requirements into your existing risk management and internal control framework, instead of a separate silo

 

Approach

Gap analysis → prioritised roadmap → implementation of processes and controls → evidence for auditors and supervisors. Available as interim compliance lead or as adviser to your project team.

 

Why ERH Consult

Etienne Herlaar, MBA, has 35+ years of experience in Finance, Risk, Compliance and IT in banking, insurance, manufacturing and consumer goods. I connect the regulation to how your organisation and systems actually work.

 

Working in Belgium and the Netherlands, in Dutch and English. Contact me for a short, free intake call.