The Ghana Association of Banks (GAB), in collaboration with the Bank of Ghana (BoG), has convened a Board of Directors Workshop to strengthen governance and oversight of cyber and information security risks within Ghana’s banking sector.
Held on Friday, 2 October 2026 at Bank Square, the workshop brought together banks’ board of directors, industry leaders and key stakeholders to deepen understanding of the evolving cyber threat landscape and the responsibilities of boards in building resilient financial institutions.
The workshop forms part of the banking industry’s broader efforts to strengthen cybersecurity and support effective implementation of the revised Cyber and Information Security Directive (CISD). It provided an opportunity for board members to engage directly with regulators and cybersecurity experts on the risks facing financial institutions and the actions required at board level as per the CISD.
The programme opened with remarks from the Chief Executive Officer of the Ghana Association of Banks, Mr John Awuah, who underscored the importance of strong leadership and effective governance in responding to the growing cyber risks facing the banking industry. His remarks set the tone for the discussions, with a clear focus on the need for boards to take an active role in strengthening cyber resilience and protecting the stability and integrity of Ghana’s financial system.This was followed by a keynote address from the Second Deputy Governor of the Bank of Ghana, Mrs Matilda Asante-Asiedu, which anchored the day’s discussions on the regulatory and strategic expectations for the banking sector. Her address highlighted the importance of strong board oversight, institutional preparedness and a coordinated approach to managing cyber and information security risks as the financial sector continues to become more digital and interconnected.
Mrs Audrey Mireku, Head of Operations, Risk and Cyber at the Ghana Association of Banks, presented on the critical role of boards in operationalising the Cyber and Information Security Directive. She highlighted the importance of translating regulatory requirements into practical governance measures to strengthen oversight, improve institutional preparedness and ensure that cybersecurity remains a priority at the highest level of decision-making
A key focus of the workshop was the role of boards in providing effective oversight of cyber risk. Discussions examined how directors can strengthen their engagement with their Chief Executive Officers, Chief Information Security Officers, Chief Risk Officers and Internal Audit teams on cybersecurity matters.
Participants also received a regulatory briefing from the Bank of Ghana’s Information Security Department on the Cyber and Information Security Directive. This was followed by discussions on operationalising the Directive and understanding the current threat landscape facing the financial industry.
The workshop also featured an executive tabletop exercise, designed to simulate a cyber crisis at board level. The exercise provided directors with an opportunity to consider how they would respond to a major cyber incident, the decisions that would be required, and the importance of coordination during a crisis.
Importantly, the discussions went beyond compliance. The workshop considered what effective cyber governance should look like in practice, including the questions boards should be asking management, the quality of information required for effective oversight, and how institutions can strengthen their preparedness before a cyber incident occurs.
The engagement also provided an opportunity for the banking industry and the regulator to discuss expectations, regulatory requirements and areas requiring greater industry coordination. The programme concluded with proposed industry actions and board-level commitments to further strengthen cyber resilience.
The Ghana Association of Banks recognises that cybersecurity is no longer solely an information technology issue. As banks become increasingly digital and interconnected, cyber risk has become a strategic, operational and governance issue that requires active attention from boards and senior management.
The workshop therefore reinforces the Association’s commitment to working with the Bank of Ghana and other stakeholders to strengthen the resilience of Ghana’s banking sector, protect customer confidence and support a secure digital financial ecosystem.
Going forward, the industry will continue to focus on stronger governance, improved preparedness, effective information sharing and coordinated responses to emerging cyber threats. The objective is clear: to ensure that Ghana’s banking sector remains resilient as the digital financial landscape continues to evolve.
The programme brought together expertise from the Bank of Ghana, the Ghana Association of Banks and the wider cybersecurity community, including representatives from the Ghana Cybersecurity Network and other relevant institutions.
