”Cairo ICT 2026”: Central Bank of Egypt Launches the Second Edition of the National Cybersecurity Framework
In a strategic step to bolster the security of the financial ecosystem, the Central Bank of Egypt (CBE) announced the launch of the second edition of the Integrated Regulatory Cybersecurity Framework for the Banking and Financial Sector during the 30th edition of the Cairo International Technology Exhibition and Conference "Cairo ICT 2026", held alongside the 13th edition of "PAFIX". The announcement was delivered by Tarek El-Khouly, Deputy Governor of the CBE, on behalf of Hassan Abdalla, Governor of the Central Bank of Egypt.
A Dynamic Regulatory Methodology Supporting Digital Banking Expansion
Tarek El-Khouly emphasized that the second edition represents a qualitative leap by shifting toward a dynamic, multi-stage regulatory model based on actual risk assessments tailored to each institution's operational volume. He highlighted that cyber threats have become a critical factor in financial service continuity, necessitating rapid response systems and free practical attack-and-defense simulation training for banks.
El-Khouly noted that banks would receive a grace period to align their status in coordination with field supervision teams. He urged increased investment in human capital while revealing that three applications for digital banking licenses are currently under review, requiring high technological readiness.
International Standards Supporting Quantum-Resistant Encryption
Sherif Hazem, Sub-Governor for the Cybersecurity Sector at the CBE, stated that the second edition was developed in collaboration with PwC, drawing on over 38 international standards to build upon the success of the first edition launched in 2022, which evaluated 38 banking institutions.
Hazem pointed out that the new framework addresses emerging threats from artificial intelligence, cloud computing, IoT, and quantum computing through quantum-resistant encryption. It also incorporates the Zero Trust architecture—based on continuous verification—alongside practical implementation guides and risk engines to align institutional capability maturity with actual risk management efficiency, safeguarding customer deposits and encouraging foreign investment.
