SLCB Secures ISO/IEC 27001:2022 Information Security Certification

Sierra Leone Commercial Bank Limited (SLCB) has attained ISO/IEC 27001:2022 Information Security Management System certification, marking a significant development in the bank’s information-security programme.

The certification was issued by MQA Certification UK Ltd and took effect on 30 September 2026. It will remain valid until 29 September 2029, subject to successful surveillance audits.

SLCB is reported to be the first indigenous bank in Sierra Leone to achieve the certification. The supplied report does not provide independent confirmation of that distinction.

Areas covered by the certification

According to SLCB, the certification covers its corporate banking, retail banking, digital banking, risk management, information security and Information Technology operations.

ISO/IEC 27001:2022 provides a structured framework for managing information-security risks and protecting sensitive information. For a financial institution, the certification relates to systems and processes used to protect customer information, financial transactions and other sensitive data against the requirements of an internationally recognized information-security management standard.

The source report said cybersecurity, data protection and operational resilience have become important components of modern banking as financial institutions increasingly depend on digital platforms to provide services.

Bank leadership response

Bintu Jonah, SLCB’s Chief Information Security Officer, described the achievement as a major milestone for the bank and its information-security programme.

“I’m honoured to serve as CISO of Sierra Leone’s first indigenous bank to achieve this certification,” Jonah said.

The certification is expected to support SLCB’s efforts to strengthen cybersecurity, protect customer information and reinforce confidence in its digital banking infrastructure.

The bank’s Managing Director, Yusufu Abdul Silla, has placed technology, digitalization and operational resilience at the centre of SLCB’s transformation drive, according to the report.

Continuing compliance

The certification does not remove the requirement for ongoing compliance. Surveillance audits are expected to assess whether SLCB continues to meet the relevant information-security requirements during the certification period.

SLCB is expected to maintain the required standards while continuing to modernize its operations and strengthen the security of its banking services.