CBN Risk-Based Cybersecurity Framework Assessment
An assessment against the CBN Risk-Based Cybersecurity Framework, producing the evidence base for your annual return.
Fixed price
₦11,200,000
Excludes 7.5% VAT on Nigerian invoices. Nigerian clients deduct 5% withholding tax; the invoice shows gross, VAT, expected deduction and net receipt.
- Standard
- 5 business days
- Express
- ₦19,600,000 · 2 days
- Renews
- Every 12 months
Regulatory and standards basis
This engagement is performed against the following instruments. Each is cited in the deliverable at the point it is relied on.
- CBN Risk-Based Cybersecurity Framework and Guidelines
- CBN circular requirements on cybersecurity self-assessment returns
Who this is for
- Nigerian banks and other financial institutions
- Payment service providers subject to the framework
What you receive
- 01Assessment against every framework domain with maturity scoring
- 02Evidence index supporting the annual return
- 03Gap remediation plan prioritised by supervisory exposure
- 04Board and board risk committee reporting pack
How the engagement runs
Phase 1
Intake
You complete a structured intake form and upload supporting documents. Autosaved, so it can be finished across several sittings.
Phase 2
Evidence review
We review what you have provided and raise a document request list for anything material that is missing. We do not guess at gaps.
Phase 3
Analysis and drafting
Your documents and answers are assessed against the applicable control universe. Findings are recorded with an evidence reference or explicitly flagged as an assumption.
Phase 4
Quality review
A named reviewer works through every finding and section, and a partner approves. Their name and credentials appear on the report.
Phase 5
Delivery
The deliverable is released in the portal within 5 business days of payment. Two revision rounds are included.
Questions
Who approves the deliverable?
A named member of the engagement team reviews it and a partner approves it. Their name, title and credentials are printed on the report, and the approval is recorded against the engagement in the portal.
What happens if we disagree with a finding?
You raise a review from the deliverable page, selecting the specific finding or assumption you are challenging and attaching supporting evidence. Two revision rounds are included. Factual corrections and any error on our side never count against those rounds and are never billed.
How quickly can this be turned around?
Standard delivery is 5 business days from payment. Express delivery in 48 to 72 hours is available at a 75% uplift.
What happens next year?
The portal reminds you 90, 60 and 30 days before it is due, and you start a new version of this engagement pre-filled from the answers you gave last time. You update only what has changed, and you see a side-by-side of what changed before you submit.
Where do our documents live?
In private storage, accessible only through short-lived signed links, with every view and download logged. Nothing is attached to email. Our sub-processors and data residency are published on the trust page.
How do we pay?
Card, bank transfer, USSD or mobile money through Paystack. Above ₦8,000,000 we also issue an invoice with a unique reference for bank transfer, because Nigerian corporate procurement generally will not put a sum that size on a card.