Cybersecurity Testing, Incident Management, Business Continuity, Outsourcing, Data Protection and Internal Controls In Part 1, we explored four key areas of the CBUAE compliance landscape: Operational Risk Management, Operational Resilience, ICT & Cybersecurity Risk Management, and UAE Information Assurance requirements.…

Cybersecurity, GRC, Operational Risk and Operational Resilience Requirements Banks and Licensed Financial Institutions (LFIs) operating in the UAE are subject to a comprehensive regulatory framework established by the Central Bank of the UAE (CBUAE). CBUAE requirements address key areas including…

Cyber threats continue to increase across the financial sector as institutions become more dependent on digital platforms, cloud services, third-party technology providers and interconnected systems. To strengthen cyber resilience within Abu Dhabi Global Market (ADGM), the Financial Services Regulatory Authority…

Building a Responsible AI Governance Framework and Achieving ISO/IEC 42001 Certification Readiness Client Overview A government organization in the Kingdom of Saudi Arabia was increasingly adopting Artificial Intelligence across its operations and digital services. AI-enabled solutions were being used and…

The Central Bank of the UAE (CBUAE) Operational Risk Management Regulation – Circular No. 1/2026 introduces enhanced requirements for Licensed Financial Institutions (LFIs) to establish a comprehensive Operational Risk and Operational Resilience framework. The regulation becomes effective on 14 September…

Organizations process significant volumes of personal data every day, including customer names, contact details, Emirates ID information, financial records, and employee data. A personal data breach does not always result from a cyberattack. Sometimes, a simple operational error—such as sending…