2019-04-10
The Central Bank of Seychelles has issued mandatory Cyber Security Guidelines requiring deposit-taking financial institutions to establish robust, board-approved governance frameworks and risk-based cyber defense strategies. The regulations mandate comprehensive practices including ongoing risk assessments, independent security audits, penetration testing, continuous monitoring, and formalized incident response and crisis management plans. Financial institutions must also implement staff awareness programs, manage third-party supply chain risks, and report cyber incidents to the regulator to ensure sector stability and protect critical information assets.