Sierra Leone Commercial Bank Attains ISO/IEC 27001:2022 Certification

Sierra Leone Commercial Bank Limited (SLCB) has attained ISO/IEC 27001:2022 Information Security Management System certification, marking a significant step in the bank’s efforts to strengthen information security and operational resilience.

The certification was issued by MQA Certification UK Ltd and took effect on 30 September 2026. It is scheduled to remain valid until 29 September 2029, subject to successful surveillance audits.

Certification scope

According to SLCB, the certification covers corporate banking, retail banking, digital banking, risk management, information security and Information Technology operations.

ISO/IEC 27001:2022 provides a structured framework for managing information-security risks and protecting sensitive information. For SLCB customers, the certification means the bank’s systems and processes for protecting customer information, financial transactions and other sensitive data have been assessed against an internationally recognized information-security management standard.

The source describes SLCB as the first indigenous bank in Sierra Leone to achieve the standard. The certification comes as financial institutions increasingly depend on digital platforms to provide banking services, making cybersecurity, data protection and operational resilience important elements of modern banking.

Focus on digital transformation

SLCB Managing Director Yusufu Abdul Silla has placed technology, digitalization and operational resilience at the centre of the bank’s transformation drive, according to the supplied report.

Bintu Jonah, SLCB’s Chief Information Security Officer, described the certification as a major milestone for the bank and its information-security programme.

“I’m honoured to serve as CISO of Sierra Leone’s first indigenous bank to achieve this certification,” Jonah said.

The certification’s continued validity will depend on successful surveillance audits. The supplied information does not provide dates or results for those audits.