# Tunisia cybersecurity and financial regulation updates > Live situation record from CLSTR: https://clstr.news/situations/tunisia-cybersecurity-and-financial-regulation-updates > Updated: 2026-09-26T08:55:04.000Z. Sources: 5. Developments: 2. Tunisia has implemented new regulatory measures focused on strengthening cybersecurity and digital protocols across public and financial sectors. In early September 2026, government head Sarra Zaafrani Zenzri issued a directive for public institutions to enhance security against increasing cyber threats. This mandate requires the use of HTTPS and multi-factor authentication, prohibits the use of social media for administrative documents, and necessitates that all official correspondence use the ‘.tn’ email domain. Furthermore, systems must undergo annual audits by agencies certified by the National Cybersecurity Agency. Following this, the Central Bank of Tunisia updated the regulatory framework for payment institutions. Effective late 2026, these new rules include mandatory annual IT audits by independent firms certified by the National Cybersecurity Agency and requirements for institutions to report cyberattacks immediately. For remote account openings, providers must utilize at least two-factor authentication alongside facial recognition or equivalent technology. The regulations also established three distinct levels of payment accounts with specific balance and withdrawal limits for individuals and legal entities. ## Timeline ### 2026-09-26: Central Bank of Tunisia updates payment institution regulations The Central Bank of Tunisia has introduced new regulations for payment institutions, mandating annual cybersecurity audits and establishing tiered account balance limits. 4 sources. https://clstr.news/cluster/central-bank-of-tunisia-updates-payment-institution-regulations ### 2026-09-04: Tunisia mandates new cybersecurity protocols for public institutions Tunisia has issued new cybersecurity mandates for public institutions, requiring multi-factor authentication, HTTPS, and the exclusive use of ‘.tn’ email domains for official communications. 2 sources. https://clstr.news/cluster/tunisia-mandates-new-cybersecurity-protocols-for-public-institutions --- Cite as: Tunisia cybersecurity and financial regulation updates. CLSTR, https://clstr.news/situations/tunisia-cybersecurity-and-financial-regulation-updates