Central Bank of Uruguay advances cybersecurity supervision rollout for the payment system with periodic reporting by e-money issuers

The Central Bank of Uruguay is moving ahead with a new cybersecurity supervision framework based on the Uruguay Cybersecurity Framework developed by the Agency for Electronic Government and Information and Knowledge Society. In this phase, the rollout focuses on institutions in the National Payment System, with Electronic Money Issuers required to begin periodic reporting on their cybersecurity capabilities from July 1. The reporting is intended to give the central bank a more complete, consistent and comparable view of security conditions across the payments ecosystem. That will support ongoing monitoring and evidence-based supervisory decisions, in line with the Payment System Roadmap 2026-2030. In discussions with industry representatives, central bank staff also elaborated on the requirements for this stage of cyber risk management strengthening, which had already been communicated to participating payment system institutions. The central bank is also progressing toward a gradual extension of the framework to other participants in the financial system. The stated aim is to deepen coordination across the ecosystem and raise cybersecurity standards in line with international good practices.