2020-04-02
The Bank of Angola issued Notice No. 08/2020 to mandate comprehensive cybersecurity policies and cloud computing adoption frameworks for all supervised Financial Institutions. The regulation requires institutions to implement risk-aligned security controls, execute detailed incident response plans with mandatory 4-hour status updates, and submit pre-contractual notifications for cloud outsourcing at least sixty days in advance. Additionally, it enforces a five-tier information classification system and obligates institutions to verify provider capabilities, ensure data recovery protocols, and maintain continuous operational resilience against cyber threats.