The Bank of Ghana (BoG) has announced plans to conduct thematic reviews of banks' compliance with its revised Cyber and Information Security Directive. This move comes amid growing concerns about digital fraud, cyber threats, and other risks associated with digital financial services. The reviews aim to ensure that banks are adhering to the directive and taking necessary measures to protect against emerging threats. The BoG has been working closely with the Ghana Association of Banks and industry players to facilitate the implementation of the revised directive.
Dr. Johnson Pandit Asiama, Governor of the Bank of Ghana, made this announcement at the 43rd Annual General Meeting of the Ghana Association of Banks in Accra. He emphasized that cybersecurity, data protection, cloud computing, third-party dependencies, and operational resilience are receiving increasing supervisory attention. The BoG is taking a proactive approach to address the evolving risks in the digital financial landscape. Dr. Asiama urged bank boards and senior management to treat cybersecurity and operational resilience as core business risks rather than merely technology issues.
The BoG's planned reviews form part of its broader supervisory efforts to strengthen the resilience of financial institutions as digitalization reshapes the banking sector. The reviews will assess banks' compliance with the revised Cyber and Information Security Directive and identify areas for improvement. This move is expected to enhance the overall cybersecurity posture of banks and protect customers' sensitive information. The BoG's efforts are aimed at ensuring that banks are well-equipped to manage emerging threats and maintain the stability of the financial system.
Digitalization has transformed financial services in Ghana, improving efficiency, convenience, and financial inclusion. However, it has also created new channels through which risks can emerge. The BoG recognizes the need for regulatory and supervisory frameworks to evolve alongside technological developments and increasingly interconnected financial risks. The bank is committed to ensuring that banks have robust risk-management frameworks in place to prepare for emerging threats.
The changing financial environment requires institutions to strengthen their risk-management frameworks and prepare for emerging threats. Dr. Asiama emphasized that bank boards and senior management must prioritize cybersecurity and operational resilience as core business risks. This requires a cultural shift within banks, with cybersecurity and operational resilience being integrated into overall business strategies. The BoG is working to ensure that banks have the necessary frameworks and systems in place to manage these risks effectively.
The 43rd Annual General Meeting of the Ghana Association of Banks also marked the launch of the sixth edition of the GH Bankers' Voice magazine. This publication provides a platform for industry stakeholders to share knowledge, insights, and best practices on various aspects of banking and finance. The meeting brought together industry leaders and experts to discuss key issues affecting the banking sector and the economy as a whole.
The BoG's proactive approach to addressing cybersecurity risks is expected to enhance the overall stability of the financial system. The planned reviews will help identify areas for improvement and ensure that banks are taking necessary measures to protect against emerging threats. By prioritizing cybersecurity and operational resilience, banks can maintain customer trust and confidence in the financial system. The BoG's efforts are aimed at ensuring that Ghana's banking sector remains resilient and competitive in the face of evolving risks and challenges.
Key points
- The Bank of Ghana will undertake thematic reviews of banks' compliance with its revised Cyber and Information Security Directive.
- The reviews aim to ensure that banks are adhering to the directive and taking necessary measures to protect against emerging threats.
- The BoG is working to ensure that banks prioritize cybersecurity and operational resilience as core business risks.
