Skip to main content
    SASRA 2026 Boardroom Governance & Compliance Tool

    SASRA 2026 Boardroom Readiness Audit Tool

    Audit your SACCO's regulatory compliance across 12 critical SASRA mandates including API security, 15% liquidity floor, 10% core capital ratio, and ODPC data privacy rules.

    SASRA 2026 Executive Regulatory & Governance Brief

    Executive Voice
    ~1.5 min audio briefing • 15% Liquidity floor & IFRS 9 ECL guidance

    Voice playback isn't supported in this browser. Read the transcript below instead.

    46%Readiness
    D High Audit Risk
    Mandate Category Breakdown
    Cybersecurity38% (10/26 pts)
    Capital & Liquidity74% (20/27 pts)
    Governance53% (16/30 pts)
    Risk & AML0% (0/17 pts)
    Filter:
    1. Core Banking API Security & EncryptionCybersecurity

    OAuth 2.0 / mTLS enforced on all external API endpoints & mobile banking channels.

    2. SASRA 15% Minimum Liquidity RatioCapital & Liquidity

    Liquid assets to short-term liabilities ratio strictly maintained above 15.0%.

    3. Institutional Capital Ratio (10%)Capital & Liquidity

    Core capital to total assets ratio maintained above 10.0% as per SASRA mandate.

    4. ODPC Data Protection & DPO RegistrationGovernance

    Data Protection Officer appointed and registered with ODPC Kenya.

    5. 24/7 SIEM & Incident Response PlanCybersecurity

    Real-time SIEM log monitoring and incident response team (IRT) protocol operational.

    6. Automated SASRA Quarterly ReturnsGovernance

    Form 1 to Form 8 financial returns automated and submitted on schedule.

    7. Automated AML & Sanctions ScreeningRisk & AML

    Real-time PEP/Sanctions screening and automated Suspicious Transaction Reporting (STR).

    8. Annual Board Fiduciary & Risk TrainingGovernance

    Board members completed mandatory annual training on SACCO Act & Digital Risk.

    9. IFRS 9 Credit Risk & ECL ProvisioningRisk & AML

    Expected Credit Loss (ECL) provisioning model applied to loan portfolio.

    10. Cloud Disaster Recovery & BCP TestingCybersecurity

    Multi-region cloud backup verified with Recovery Time Objective (RTO) < 2 hours.

    11. Member Deposit Insurance ComplianceCapital & Liquidity

    Deposit protection limits and member disclosures compliant with SASRA guidelines.

    12. Consumer Protection & Dispute SLAGovernance

    Formal member complaints handling framework and 48-hour resolution SLA.

    Book SASRA Audit Defense Call

    Related Tools