1
CBN Cybersecurity
SOC, VAPT, incident response, vendor risk, board evidence.
Compliance automation
African compliance automation linked to real security posture.
Shomar operating loop
1
Security scan2
Risk scoring3
Compliance mapping4
Evidence and reportingAfrica-ready
Evidence-led
Project-bound
1
Assign
Purchased bundle only.
2
Gap
Controls become work.
3
Evidence
Proof stays traceable.
4
Retake
Readiness updates.
Frameworks
Coverage for financial services, privacy, payments, cloud, and internal assurance.
Coverage map
Frameworks become owned work.
Bundles stay scoped. Gaps stay assigned. Evidence stays traceable.
Bundle
Gap
Evidence
2
NIBSS NPS
Payment-stack readiness and settlement infrastructure controls.
3
Cross-border payments
AML/CFT, FX, corridors, sanctions, settlement, partner evidence.
4
Crypto / VASP
Custody, AML/CFT, Travel Rule, wallets, customer asset evidence.
5
NDPR / NDPA
Inventories, notices, DPIAs, retention, breaches, processors.
6
PCI DSS
Cardholder data, logging, access, vulnerability management, SDLC.
7
ISO 27001
ISMS risk treatment, supplier risk, secure engineering, continuity.
8
SWIFT CSP
MFA, secure SWIFT environments, monitoring, segmentation.
9
CIS Controls
Asset, software, access, logging, recovery, vulnerability hygiene.
10
Cloud baseline
IAM, encryption, backups, secrets, containers, Kubernetes.
Bundle model
Framework access is assigned, not self-selected.
1
Platform admin provisions the organisation.
2
Only subscribed frameworks appear.
3
Security posture creates control gaps.
4
Reviewed changes become alerts.
Evidence workflow
Every gap should become an owned action.
1
Assign framework bundle.
2
Generate posture-linked gaps.
3
Assign owners and submit evidence.
4
Retake assessment and export reports.