2023-12-29
The Authority for Financial Markets of the West African Monetary Union (AMF-UMOA) issued Instruction No. 80/2023 to mandate comprehensive information system security, governance, and risk management standards for Central Securities Depositories and Settlement Banks. The regulation establishes strict technical controls, including mandatory audit trails, robust password policies, segregated testing and production environments, and defined Recovery Time and Point Objectives of 24 hours and two hours, respectively. It further requires continuous risk identification, biannual internal control reporting, triennial security audits, and immediate notification of major incidents to the regulator within 24 hours.