Regulatory Alerts2026-01-20
Circular No. 01/EFI/2026, of January 14 – Model for Reporting Technological and Cyber Incidents
The Bank of Mozambique issued Circular No. 01/EFI/2026 mandating credit institutions and financial companies to report technological and cyber incidents using standardized preliminary, intermediate, and final reporting models submitted via the BSA Portal or email. The directive establishes strict submission deadlines of 24 hours, 10 business days, and 30 business days respectively, while requiring detailed classification of incidents by nature and severity alongside comprehensive impact assessments across reputational, financial, and operational dimensions. Institutions must also submit aggregated statistical reports and explanatory notes to align with prior Notice No. 8/GBM/2025, with the circular taking effect on March 9, 2026.
Share