The UAE Central Bank’s updated operational-risk regulation took effect on 14 September. Banks and licensed financial institutions now operate under a stronger framework covering technology failures, cyberattacks, fraud, system outages and disruption caused by critical third-party providers.

The details

The UAE Central Bank’s new Operational Risk Management Regulation came into force on 14 September 2026, replacing standards issued in 2018.

The framework addresses risks that can interrupt financial services, including technology failures, cyberattacks, fraud, system failures and disruption involving third-party companies used by banks and other licensed financial institutions. It is directed at regulated institutions rather than imposing a new application or fee on ordinary account holders.

The resident relevance is indirect but practical: stronger operational-resilience requirements are intended to support continuity of banking and payment services during outages, cyber incidents and other disruptions. The regulation does not guarantee that individual institutions will never experience service interruptions.