What happened

The Central Bank of Kenya (CBK) published a draft Risk Management Guideline for the year 2026, signalling a comprehensive overhaul of the regulatory expectations placed on commercial banks and other licensed financial institutions. The draft, released in early June 2026, is the first major revision since the 2012 guideline and has been circulated to industry stakeholders for a 60‑day public consultation period. Deloitte, acting as an external consultant, issued a brief commentary that outlines the key proposed changes and their potential impact on the banking sector and downstream borrowers. The CBK has invited comments from banks, corporate clients, SMEs, and professional bodies, promising to incorporate feedback before the final version is signed off later in the year. The announcement was made during a press briefing at the CBK headquarters in Nairobi, where Governor Dr. Kamau Muthoni emphasized the need for a more resilient financial system.

Context and background

Risk management has been a cornerstone of Kenya’s financial stability agenda since the early 2000s, when the CBK introduced basic capital adequacy and liquidity standards to align with Basel II. Over the past decade, the global banking environment has shifted dramatically, with heightened cyber threats, climate‑related financial risks, and more complex derivative exposures prompting regulators worldwide to tighten oversight. In Kenya, the 2012 guideline focused primarily on credit risk and capital buffers, leaving gaps in areas such as operational resilience and stress‑testing frequency. The draft 2026 guideline seeks to close those gaps by embedding international best practices, including elements drawn from Basel III and emerging ESG‑risk frameworks.

Deloitte’s involvement stems from a consultancy contract awarded by the CBK in 2024 to provide an independent review of the proposed regulatory text. Their analysis, shared publicly in a concise briefing note, highlights three broad themes: governance strengthening, enhanced quantitative risk metrics, and greater transparency for stakeholders. While Deloitte does not set policy, its reputation as a leading professional services firm gives weight to the observations, and the CBK has referenced the consultancy’s findings in its introductory remarks.

The drafting process has been iterative. Initial stakeholder workshops held in 2023 gathered input from major banks such as KCB, Equity, and Co‑op, as well as from the Kenya Bankers Association and the Institute of Certified Public Accountants of Kenya. Those early sessions revealed concerns about the operational burden of more frequent reporting and the need for capacity building among smaller lenders. In response, the CBK incorporated a phased implementation schedule, allowing institutions to adopt new requirements over a 24‑month horizon rather than immediately.

Compared with what is normal

Historically, Kenyan banks have submitted risk‑management reports on a semi‑annual basis, with limited granularity on market‑risk exposures. The draft 2026 guideline proposes several departures from that norm, aiming to bring Kenya in line with regional peers such as South Africa’s SARB and Nigeria’s CBN.

• Reporting frequency would shift from twice a year to quarterly submissions for key risk indicators, including liquidity coverage ratio and net stable funding ratio.
• The definition of “high‑risk exposures” would be broadened to encompass climate‑related credit risk, a category that was previously addressed only in ad‑hoc supervisory notes.
• Operational risk frameworks would be required to include cyber‑security stress tests, reflecting the growing prevalence of ransomware attacks on African financial institutions.
• Governance expectations would mandate a dedicated risk‑management committee at the board level, with clear accountability for risk appetite statements.

Why it matters

For Kenyan SMEs and corporate borrowers, the revised guideline could translate into tighter loan underwriting standards as banks adjust to higher capital and liquidity buffers. A more rigorous stress‑testing regime may lead banks to re‑evaluate the risk profile of existing loan books, potentially prompting renegotiations of terms or stricter covenant enforcement. On the positive side, stronger risk oversight is expected to reduce the likelihood of systemic shocks, protecting depositors and maintaining confidence in the financial system. The increased focus on climate risk also means that businesses operating in agriculture or energy may need to disclose environmental impacts to secure financing, aligning credit decisions with Kenya’s Vision 2030 sustainability goals. Finally, the phased implementation gives banks time to upgrade internal systems, but smaller institutions may still face significant compliance costs, prompting a need for external advisory support.

Practical steps

• Review communications from your bank or lending partner to understand any changes to loan covenants or reporting requirements that may arise from the new guideline.
• Strengthen your own internal risk registers, especially around cash‑flow volatility and climate‑related exposures, to be prepared for more detailed credit assessments.
• Engage with a trusted financial adviser or auditor early in the consultation window to interpret the draft and assess how it may affect your financing arrangements.
• Monitor the CBK’s public consultation portal for updates and submit any comments or concerns before the 60‑day deadline closes.
• Allocate budget for potential system upgrades or staff training that align with the quarterly reporting cadence proposed in the draft.

Beavoren Ventures offers a specialised Financial Management & Analysis service that can help SMEs and mid‑size firms interpret the draft CBK guideline, assess its impact on existing financing, and implement robust risk‑management practices.

Talk to our team at Beavoren Ventures - info@beavorenventures.co.ke - to set up your systems correctly.

Disclaimer: This article is informational and does not constitute formal tax, audit or legal advice. For guidance specific to your circumstances, please contact Beavoren Ventures.