# CBUAE Requirements: Central Bank of the UAE regulations for licensed financial institutions

> Outsourcing, business continuity, consumer protection and operational risk expectations for UAE-licensed financial institutions.

URL: https://securei3.com/standards/cbuae-regulations/
Category: GCC regulations: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


The Central Bank of the UAE issues regulations and standards for banks, finance companies, exchange houses, insurers and payment service providers, covering outsourcing, business continuity, operational risk, consumer protection and information security. Licensed institutions increasingly pass these requirements on to their vendors through contract clauses.

We help institutions build compliant frameworks and help vendors meet bank due diligence, typically through ISO 27001, ISO 22301 and SOC 2 evidence.

## Who it is for

- UAE banks, finance companies and exchange houses
- Payment service providers and insurers
- Technology vendors to UAE financial institutions

## Benefits

- Inspection-ready frameworks
- Faster vendor onboarding with UAE banks

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Why do UAE banks ask vendors for ISO 22301?

Business continuity and outsourcing requirements make institutions accountable for the resilience of critical vendors. ISO 22301 certification is a clear way to demonstrate it.

Related: https://securei3.com/standards/iso-22301/, https://securei3.com/standards/iso-27001/, https://securei3.com/standards/uae-aml/

Contact: https://securei3.com/contact/: info@securei3.com