NCBA Bank Uganda and Kenya have reached a major milestone by attaining dual ISO certifications from the British Standards Institution (BSI), a global accreditation body, reinforcing the bank’s commitment to information security, data privacy, and regulatory compliance.
The bank becomes the first local lender in East and Central Africa to achieve ISO/IEC 27701 certification, a global standard for Privacy Information Management Systems, alongside ISO/IEC 27001 for Information Security Management Systems.
Together, these certifications provide a structured and systematic approach to managing, processing, and safeguarding sensitive data of customers, employees, and third parties.
The dual certifications align NCBA’s security and privacy practices with international best standards while ensuring compliance with Uganda’s Data Protection and Privacy Act and Kenya’s Data Protection Act. They also signal a proactive approach to building trust with customers, partners, and stakeholders by safeguarding personal and corporate information.
Mark Muyobo, CEO of NCBA Bank Uganda, described the achievement as “a significant milestone in our continuous journey to strengthen information security within our operations. Our customers can be assured that we uphold the highest standards in security, service management, and regulatory compliance.”
The certification program is part of NCBA’s digital growth strategy, driven by its cross-border operations and reliance on technology and third-party service providers. Phase one covered Kenya and Uganda, with Kenya prioritized as the hub for approximately 80% of the group’s information security and technology functions. Phase two will extend certification to Loop DFS operations in Tanzania and Rwanda, leveraging lessons from the first phase.
ISO/IEC 27001 provides a risk-based framework to protect information assets, while ISO/IEC 27701 strengthens governance around Personally Identifiable Information (PII). According to Mr. Muyobo, staff training and a culture of continuous improvement are central to maintaining these high standards, enabling NCBA to deliver secure, innovative, and efficient banking services.
With these dual certifications, NCBA Bank consolidates its position as a regional banking leader, demonstrating its commitment to global standards and operational excellence.