01
Document overview
Governs risk management when data and processes are outsourced to a cloud provider, including board and management responsibility, provider assessment, contracting, security, continuity, audit, regulatory access and exit.
02
Scope and exclusions
Applies to
Addresses licensed banks, finance and leasing companies, money exchange companies and payment service providers operating in Oman.
Limitations and exclusions
A cloud contract does not transfer the institution's regulatory responsibility to the provider; cross-border processing also requires data, bank-secrecy and cyber-security analysis.
04
Official source
CBO Circular BM 1185 · 8 May 2022 · Central Bank of Oman
September 13, 2026
Open official source ↗