Regulatory Alerts2026-08-27
Added · Updated
Enhancement of Operational Resilience to Address Quantum Computing Risks
Financial institutions in the Kingdom, including banks, credit information companies, finance companies, payment services companies, and other entities supporting financing activity licensed by the Central Bank, are required to implement measures to enhance operational resilience against quantum computing risks. By the end of the first quarter of 2027, they must conduct a quantum computing risk assessment and develop action plans to address identified risks, covering operational, legal, regulatory, strategic, and human resource aspects. By the end of the fourth quarter of 2026, institutions must ensure accurate inventorying and classification of all cryptographic assets, identifying data, systems, and services by sensitivity and priority for transition to quantum-resistant solutions, and assessing cryptographic resilience for priority assets. Furthermore, they must develop plans for cryptographic resilience and integrate quantum computing risks as a standing item for periodic monitoring by their Supervisory Committee for Information Security and Risk Committee.
More like this from SAMA
SAMA published 1 document in the last 30 days. We email you each new one the day it's published.