The Riffle
The Dubai Financial Services Authority (DFSA) has amended several modules of its Rulebook, including GEN, PIB, GLO and IFR. The changes introduce enhanced governance expectations, more robust risk management requirements, revised credit risk standards and formal consideration of climate-related and digitalisation risks.
The amendments are intended to align firms with evolving international prudential standards and will apply from 1 January 2027.
Key Highlights
Dedicated Risk Management Functions
Large and complex Authorised Persons will be required to establish an independent risk management function with appropriate senior oversight and direct engagement with the Governing Body.
Mandatory Risk Appetite Statements
Category 1, Category 2 (excluding Matched Principals) and Category 5 firms must maintain a documented and Governing Body-approved Risk Appetite Statement aligned with their capital and liquidity position.
Greater Focus on Risk Culture
The Governing Body will be explicitly responsible for promoting and maintaining a sound corporate and risk culture across the organisation.
Enhanced Internal Audit and MIS Requirements
Firms must ensure independent internal audit functions and maintain management information systems capable of supporting effective decision-making, risk aggregation and stress-period monitoring.
New Credit Classification Framework
The PIB module introduces a standardised five-tier classification system ranging from Standard to Loss, together with prescribed provisioning requirements for impaired exposures.
Revised Large Exposure Rules
The amendments clarify concentration risk requirements and introduce enhanced monitoring expectations for large exposures and connected counterparties.
Climate and Digitalisation Risks Added
Firms will need to consider climate-related financial risks and digitalisation risks within their risk management frameworks, IRAPs and ICAAPs where material.
Islamic Finance Updates
The IFR module introduces changes relating to market risk calculations and concentration risk treatment for assets financed through PSIAs.
Timeline
Milestone | Date |
|---|---|
Rulemaking Instruments Issued | 11 May 2026 |
Implementation Date | 1 January 2027 |
Origin | Consultation Paper No. 167 |
Why It Matters
The amendments reflect the DFSA’s continued focus on strengthening governance, risk oversight and prudential resilience across regulated firms. In particular, the introduction of formal risk appetite requirements, enhanced risk governance obligations and recognition of emerging risks signals a more forward-looking supervisory approach.
Firms should use the lead time before January 2027 to assess governance arrangements, risk frameworks, reporting systems and capital management processes against the new requirements.
Conclusion
The latest Rulebook amendments represent a significant enhancement of the DFSA’s prudential framework. While many of the changes formalise existing supervisory expectations, firms will need to ensure their governance, risk management and reporting structures are sufficiently robust ahead of the implementation date.
