2022-01-01
The Central Bank of The Gambia issued these guidelines to establish minimum cybersecurity governance and risk management standards for all authorized financial institutions. The framework mandates the appointment of a Chief Information Security Officer, the formation of a Cybersecurity Steering Committee, and the implementation of robust disaster recovery, business continuity, and outsourcing controls. Institutions must conduct regular independent assessments, maintain continuous staff awareness training, report high-impact incidents promptly, and face sanctions for non-compliance to ensure systemic cyber resilience.