Summary
This document is a Cyber Thematic Review conducted by the Dubai Financial Services Authority (DFSA) in 2024. It assesses the maturity levels of cyber risk management frameworks among Authorised Firms, Authorised Market Institutions, and Registered Auditors. The Review aims to evaluate compliance with DFSA Cyber Risk Management Rules and to identify growth in maturity since the previous 2022 Review. The findings indicate an overall improvement in cybersecurity maturity, with notable advancements in resilience programs, including continuous monitoring and incident response testing. However, certain areas, such as third-party risk management and the implementation of resilience requirements, still require attention. The Review utilized an online questionnaire sent to 641 Firms, achieving a 95% response rate, and covered key topics such as governance, hygiene, and resilience in cybersecurity practices. The report serves as a collective assessment of responses and is intended to provide general observations rather than comprehensive advice.
