UAE Central Bank Puts Cyber Resilience, AI & Governance at Heart of 2027 Regulatory Agenda

Key Takeaways

• 2027 Regulatory Priorities: The Central Bank of the UAE outlined its supervisory priorities for 2027 during a November 4 roundtable with banking and insurance executives, alongside its broader 2027–2029 strategy.
• Governance and Suitability: The CBUAE discussed efforts to develop its suitability framework and strengthen governance within financial institutions.
• Cyber Resilience and Fraud Prevention: Discussions covered the Financial Sector Security Operations Centre, the Anti-Fraud Operations Centre and developments involving the anti-fraud platform.
• AI and Digital Asset Supervision: The central bank addressed thematic supervisory reviews involving artificial intelligence and digital assets in banking, alongside insurance-sector reviews concerning resilience, digitalization and climate.

Deep Dive

The Central Bank of the UAE has put cybersecurity, fraud prevention, corporate governance and emerging technologies on its supervisory agenda for 2027, outlining its priorities during a meeting with the country's banking and insurance executives in Abu Dhabi on Wednesday. The meeting brought together senior central bank officials and chief executives for the UAE Financial Sector Supervisory Roundtable, where discussions ranged from the suitability of financial institution leadership to the growing use of artificial intelligence and digital assets. The gathering also offered a look at the Central Bank of the UAE's (CBUAE) strategy for 2027 through 2029, with operational resilience and closer coordination between supervisors and financial institutions receiving particular attention.

CBUAE Governor Khaled Mohamed Balama opened the meeting by emphasizing the importance of financial stability and the central bank's approach to risk-based supervision.

"Financial institutions’ resilience rests on their financial soundness and their ability to anticipate risks, respond to disruptions and recover swiftly, thereby protecting customers and strengthening trust in the financial system," Balama said.

He also called for continued dialogue between regulators and financial institutions, arguing that the increasing interconnectedness of financial services makes direct engagement with banks and insurers particularly valuable.

Such discussions, he said, help the central bank understand the challenges institutions face while giving executives a clearer understanding of how supervisory expectations should be reflected in their operations.

The roundtable, held under the theme "Fostering Financial Resilience and Prosperity," was attended by Abdul Aziz Al Ghurair, chairman of the UAE Banks Federation, and Ahmed Saeed Al Qamzi, the CBUAE's assistant governor for banking and insurance supervision, alongside other senior officials.

Governance and Cyber Resilience Take Center Stage

The first of three sessions examined the central bank's 2027–2029 strategy, its regulatory and supervisory framework, and the priorities that will guide its work next year. Among the matters discussed were efforts to develop the CBUAE's suitability framework and strengthen governance within financial institutions. Officials also addressed the central bank's own resilience and provided updates on the Financial Sector Assessment Program (FSAP).

The governance discussions placed particular attention on the suitability framework, although the CBUAE did not disclose proposed amendments or specify whether additional requirements would be introduced.

Operational and cyber resilience dominated the second session.

Officials examined the role of the Financial Sector Security Operations Centre (FSOC) and its impact on the banking sector. Fraud prevention also featured prominently, with discussions covering emerging threats, developments involving the Anti-Fraud Operations Centre (CAFOC) and updates to the anti-fraud platform.

The session considered the financial sector's security arrangements alongside the measures individual institutions have taken to withstand disruption.

Bank chief executives shared their experiences strengthening resilience during a panel discussion, including lessons drawn from their institutions' efforts. The CBUAE did not identify the institutions involved or disclose specific findings from those exchanges.

Digital Assets and AI Under Supervisory Review

Artificial intelligence and digital assets were among the subjects considered during the final session, which examined thematic supervisory reviews in the banking sector. The CBUAE identified both areas as part of its supervisory work but provided no findings from the reviews or details of possible regulatory changes. The discussion also extended to the insurance industry, where officials examined market developments and supervisory reviews concerning resilience, digitalization and climate.

These reviews formed part of a broader discussion about supervisory expectations across the two sectors. Bank and insurance executives subsequently participated in a panel examining how their institutions could better align their practices with the central bank's approach.

Al Qamzi, who chaired the three sessions, closed the roundtable by summarizing the discussions and emphasizing the importance of continued cooperation between the CBUAE and financial institutions.

The central bank said that cooperation would help strengthen the financial sector's efficiency and resilience while bringing industry practices into closer alignment with its supervisory direction.

Although the meeting covered a wide range of regulatory concerns, the CBUAE did not announce new rules, implementation deadlines or specific compliance obligations. Its statement also stopped short of identifying the findings of its thematic reviews or setting out proposed changes to the governance and suitability framework.

For banks and insurers, the immediate significance lies in the areas receiving supervisory attention. Cybersecurity, fraud prevention, governance, AI, digital assets and climate-related insurance supervision are all part of the central bank's discussions as it prepares for 2027.

The precise requirements associated with those priorities will depend on the further development of the CBUAE's regulatory and supervisory work.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey