About This Course

Financial institutions hold exactly what attackers want: client identity documents, account details, transaction records, and market-sensitive information. This course prepares staff at Ethiopian capital market service providers to protect that data and to meet the cybersecurity and data-protection obligations set out in the governing directive.

The course begins by establishing why market integrity depends on information security, and sets out the mandate of the Ethiopian Capital Market Authority in this area. It then works through the corporate compliance systems a firm is expected to maintain - access controls, information-handling restrictions, and monitoring of staff and trading activity.

Later modules turn from institutional systems to individual behaviour. Learners examine the everyday decisions where security is won or lost: how client data is shared, stored, and disposed of; how to recognise a suspicious request; and what counts as adequate care when handling confidential material. The course also covers the duty to report incidents and breaches, the channels for doing so, and the protections available to staff who report in good faith.

The final module sets out the consequences of failure - disciplinary, professional, civil, and criminal - so that learners understand the personal stakes rather than treating data protection as someone else's responsibility.

Learners finish able to identify the data their role touches, apply the required handling controls, recognise a security incident, and report it through the correct channel without delay.