2021-01-01

CBE Guidelines on Cybersecurity for Financial Institutions No. 1 of 2021

The Central Bank of Eswatini mandates all licensed financial institutions to implement a comprehensive cyber resilience framework within twelve months, establishing clear board and senior management oversight for managing ICT-related cyber risks. Institutions must systematically identify, protect, detect, and respond to threats through integrated policies covering critical operations, vendor ecosystems, insider risks, and incident notification protocols. The guidelines require continuous testing, situational awareness via threat intelligence, and periodic benchmarking against leading standards, with the Central Bank conducting oversight inspections and imposing administrative sanctions for non-compliance.

Central Bank of Eswatini logo

Eswatini

Central Bank of Eswatini

Click to view full text