First announced: Central Bank regulatory circulars issued in 2025.
Submitted by: NYBACS Compliance Desk
Three-line brief
UAE Central Bank introduced enhanced governance and risk management rules for licensed financial institutions.
Stronger compliance oversight and internal audit mandates apply.
Firms must align governance structures with new standards.
What changed
Binding provisions address board oversight, internal controls, risk committees and cybersecurity resilience.
Who’s affected
Banks, finance companies, payment providers and regulated financial institutions in the UAE.
Immediate actions
• Update governance charters.
• Review risk committee mandates.
• Align cybersecurity policies.
Practical notes & timeline
Implementation deadlines vary by license type; supervisory inspections expected in 2026.
