South Africa

Currency: ZAR
Services available: 102
Obligations tracked: 6

Regulatory landscape

South Africa splits financial regulation between the Prudential Authority and the Financial Sector Conduct Authority under a Twin Peaks model. Financial Services Provider licences are issued by the FSCA across categories I to IV, and crypto asset service providers now require their own FSCA licence.;

Anti-money-laundering obligations arise under the Financial Intelligence Centre Act, with guidance issued by the FIC. Credit providers register with the National Credit Regulator under the National Credit Act.;

Data protection is governed by the Protection of Personal Information Act, which requires an appointed Information Officer registered with the Information Regulator.

Regulators

SARB
FSCA
FIC
Information Regulator
NCR
Prudential Authority

Recurring obligations

What a licensed entity in South Africa has to do, and how often. Which of these apply to you depends on your entity type and the licences you hold. In the portal, the applicable ones attach to your organisation automatically and appear on a calendar with reminders.

FIC

Obligation	Frequency	When	Service
Risk Management and Compliance Programme review Review and update the Risk Management and Compliance Programme required by the Financial Intelligence Centre Act.	Annual	Reviewed at least annually	View
Suspicious and unusual transaction reporting Report suspicious and unusual transactions to the Financial Intelligence Centre.	On event	Within the period prescribed by the FIC Act after forming a suspicion	View

FSCA

Obligation	Frequency	When	Service
FSP compliance report Submit the compliance report required of licensed financial services providers.	Annual	Annually, on the date determined by the FSCA for the licence category	View

Information Regulator

Obligation	Frequency	When	Service
Information Officer registration Register the Information Officer and any deputies with the Information Regulator.	On event	On appointment and on any change of Information Officer	View
Security compromise notification Notify the Information Regulator and affected data subjects of a security compromise.	On event	As soon as reasonably possible after discovery	View

NCR

Obligation	Frequency	When	Service
Credit provider annual compliance report Submit the annual compliance report required of registered credit providers.	Annual	Annually, in the form prescribed by the National Credit Regulator	View

Engagements available in South Africa

Service	Practice area
AML/CFT Gap Assessment and Remediation Roadmap	AML, CFT and Financial Crime
AML/CFT Training Curriculum and Materials	AML, CFT and Financial Crime
AML/CFT/CPF Policy and Procedures Manual	AML, CFT and Financial Crime
Board and Senior Management AML Briefing Pack	AML, CFT and Financial Crime
Crypto Travel Rule Compliance Framework	AML, CFT and Financial Crime
Enterprise-Wide ML/TF/PF Risk Assessment	AML, CFT and Financial Crime
KYB and Beneficial Ownership Framework	AML, CFT and Financial Crime
KYC/CDD/EDD Programme and Customer Risk Rating Model	AML, CFT and Financial Crime
Sanctions and PEP Screening Programme Design	AML, CFT and Financial Crime
STR/SAR Filing Playbook and goAML Guide	AML, CFT and Financial Crime
Transaction Monitoring Model Validation	AML, CFT and Financial Crime
Transaction Monitoring Rules Design and Tuning	AML, CFT and Financial Crime
Wolfsberg CBDDQ Completion Pack	AML, CFT and Financial Crime
AML Alert Backlog and Look-Back Review	AML, CFT and Financial Crime
Independent AML/CFT Audit	AML, CFT and Financial Crime
Full Compliance Function	AML, CFT and Financial Crime
Outsourced Money Laundering Reporting Officer	AML, CFT and Financial Crime
Change in Control and Shareholding Approval	Licensing support and regulatory affairs
Fit and Proper Pack	Licensing support and regulatory affairs
FSCA Crypto Asset Service Provider Licence Application Support	Licensing support and regulatory affairs
FSCA Financial Services Provider Licence Application Support	Licensing support and regulatory affairs
Licence Maintenance and Returns Filing	Licensing support and regulatory affairs
Mock Regulatory Examination	Licensing support and regulatory affairs
Multi-Market Entry and Regulatory Feasibility Study	Licensing support and regulatory affairs
NCR Credit Provider Registration	Licensing support and regulatory affairs
Regulatory Examination Remediation Programme	Licensing support and regulatory affairs
Regulatory Sandbox Application	Licensing support and regulatory affairs
Compliance Calendar and Returns Filing Service	Licensing support and regulatory affairs
Regulatory Change Monitoring	Licensing support and regulatory affairs
Business Continuity and Disaster Recovery Plan	Cybersecurity and Assurance
CBN Risk-Based Cybersecurity Framework Assessment	Cybersecurity and Assurance
Incident Response Plan and Playbooks	Cybersecurity and Assurance
Information Security Policy Suite	Cybersecurity and Assurance
ISO 27001 Internal Audit	Cybersecurity and Assurance
ISO 27001 ISMS Documentation Suite	Cybersecurity and Assurance
PCI DSS v4.x Gap Assessment and Scoping	Cybersecurity and Assurance
Secure SDLC Programme Design	Cybersecurity and Assurance
SOC 2 Readiness Assessment	Cybersecurity and Assurance
Third-Party Security Assessment	Cybersecurity and Assurance
API Penetration Test	Cybersecurity and Assurance
Cloud Configuration and Security Review	Cybersecurity and Assurance
Dependency and Container Security Assessment	Cybersecurity and Assurance
External Network Penetration Test	Cybersecurity and Assurance
Internal Network Penetration Test	Cybersecurity and Assurance
Mobile Application Penetration Test	Cybersecurity and Assurance
PCI ASV External Scanning	Cybersecurity and Assurance
Phishing Simulation Campaign	Cybersecurity and Assurance
Platform Configuration Review	Cybersecurity and Assurance
Remediation Validation Retest	Cybersecurity and Assurance
Secure Source Code Review	Cybersecurity and Assurance
Web Application Penetration Test	Cybersecurity and Assurance
Wireless Security Assessment	Cybersecurity and Assurance
Card Scheme and EMV Certification Support	Cybersecurity and Assurance
ISO 27001 Full Implementation to Certification	Cybersecurity and Assurance
PCI DSS Report on Compliance	Cybersecurity and Assurance
Red Team and Adversary Simulation	Cybersecurity and Assurance
SOC 2 Type I Audit	Cybersecurity and Assurance
SOC 2 Type II Audit	Cybersecurity and Assurance
Continuous Attack Surface Monitoring	Cybersecurity and Assurance
Incident Response Retainer	Cybersecurity and Assurance
Virtual Chief Information Security Officer	Cybersecurity and Assurance
Vulnerability Management as a Service	Cybersecurity and Assurance
Breach Response Playbook and Notification Templates	Data Protection and Privacy
Cross-Border Transfer Impact Assessment	Data Protection and Privacy
Data Protection Impact Assessment	Data Protection and Privacy
DSAR Handling Process and Templates	Data Protection and Privacy
NDPA/NDPR Compliance Gap Assessment	Data Protection and Privacy
POPIA Readiness Assessment	Data Protection and Privacy
Privacy Notice and Consent Framework Suite	Data Protection and Privacy
ROPA, Data Mapping and Retention Schedule	Data Protection and Privacy
Outsourced Data Protection Officer	Data Protection and Privacy
Capital Adequacy and Prudential Ratio Review	Financial Audit and Tax
IFRS 9 ECL Model Documentation and Validation	Financial Audit and Tax
Internal Audit Plan and Risk-Based Audit Universe	Financial Audit and Tax
Investor Compliance Due Diligence Pack	Financial Audit and Tax
Safeguarding and Trust Account Reconciliation Review	Financial Audit and Tax
Tax Health Check and Compliance Review	Financial Audit and Tax
Transfer Pricing Documentation	Financial Audit and Tax
Forensic Investigation and Fraud Examination	Financial Audit and Tax
IFRS 17 Implementation	Financial Audit and Tax
Internal Audit Outsourcing	Financial Audit and Tax
Statutory External Audit	Financial Audit and Tax
AI/ML Model Risk Validation	Risk and Governance
Anti-Bribery and Corruption Programme	Risk and Governance
Consumer Protection and Complaints Framework	Risk and Governance
Corporate Governance Framework and Board Charters	Risk and Governance
Credit Scoring Model Validation and Bias Audit	Risk and Governance
Digital Lending Compliance Assessment	Risk and Governance
ERM Framework, Risk Register and KRI Library	Risk and Governance
ESG and IFRS S1/S2 Reporting Readiness	Risk and Governance
Financial Promotions and Marketing Compliance Review	Risk and Governance
Fraud Risk Management Framework	Risk and Governance
Internal Control Framework Design	Risk and Governance
Operational Resilience and Critical Service Mapping	Risk and Governance
Outsourcing and Third-Party Risk Framework	Risk and Governance
Board and Executive Briefing	Risk and Governance
Certification Exam Preparation	Risk and Governance
Open-Enrolment Course Seat	Risk and Governance
Outsourced Compliance Officer	Risk and Governance
Policy Library Subscription	Risk and Governance
Private Cohort Training	Risk and Governance
Security and Compliance Training Programme	Risk and Governance