The Central Bank of Kuwait's new cyber and operational resilience framework, and how ADVOX helps banks and financial institutions prepare for it.
Launched on 3 December 2025, CORF replaces CBK's 2020 Cybersecurity Framework and is the main resilience rulebook for the sector. It is built on three baselines: cyber resilience, operational resilience and third-party risk management. The Board is ultimately accountable, and institutions must identify their critical services and keep them running through disruption.
CBK announcement ↗CBK instructions expect each bank to keep an approved business continuity plan, identify alternative locations and contingency operating arrangements, and test them periodically. CBK has also directed banks to run regular drills and keep emergency plans up to date.
Central Bank of Kuwait ↗The international management-system standard for business continuity. It gives a clear structure for the operational resilience baseline in CORF and for organisations outside financial services.
ISO 22301 overviewOrganisations outside financial services should confirm the requirements of their own sector regulator and any contractual continuity obligations from major customers.
Ask ADVOXBCI CBCI certification training and specialist courses in business continuity, incident response, crisis management and resilience.
Tailored awareness and role-based training for leadership, continuity teams, business owners and operational staff.
A structured review of your BCM programme against the central-bank or sector rules that apply to you, with a prioritised plan to close the gaps.
Scenario-based exercises, plan validation, programme reviews, maturity assessments and continual-improvement support.
Business continuity standards, central-bank rules and other regulatory requirements for the countries ADVOX supports.