> ## Content Index
> Fetch the complete content index at: https://www.ai-360.online/llms.txt
> Use this file to discover other available public pages before exploring further.

# UAE Central Bank sets four-hour reporting in new operational risk rules
- URL: https://www.ai-360.online/uae-central-bank-puts-four-hour-reporting-at-the-centre-of-operational-resilience/
- Published: 2026-09-18T11:47:49.000Z
- Updated: 2026-10-31T22:02:27.000Z
- Description: The UAE Central Bank's operational risk regulation, in force from 14 September, requires notice within four hours of serious disruption to critical operations.
- Author: AI-360
- Tags: 5. Regulation, 1. Banking AI, News, risk, BFSI, Enterprise AI, #industry-banking-finance

[The Central Bank of the UAE](https://www.centralbank.ae/?ref=ai-360.online) has put its Operational Risk Management Regulation, C 1/2026, into force for licensed financial institutions, [effective on 14 September 2026](https://rulebook.centralbank.ae/en/entiresection/7278?ref=ai-360.online).

Under Article 15.2, an institution must notify the Central Bank within four hours of an operational risk event that significantly impacts, or may significantly impact, the continuity or integrity of its Critical Operations, including which operations are affected. A summary report on the nature of the event, the actions being taken, the likely impact and the timeframe for recovery is due within 24 hours.

High-risk incidents must be reported within 72 hours, under criteria set in board-approved policies.

The regulation requires a board-approved operational resilience strategy, board oversight of ICT and cybersecurity risk management, and a board-approved strategy for third-party risk. Institutions must obtain a notice of non-objection before outsourcing any activity whose disruption could significantly affect Critical Operations, and must keep their Master System of Record in the UAE.

---