Frameworks · Africa
Joint Standard 1 asks for IT service management that covers change and release, under a risk framework the governing body oversees. Aspian Cloud keeps the change and release records, and gives the board a summary it can read.
- Instrument
- Joint Standard 1 of 2023: IT Governance and Risk Management for Financial Institutions
- In force
- Published November 2023 (Joint Communication 4 of 2023); commenced 15 November 2024
- For
- Financial institutions supervised by South Africa’s Prudential Authority and FSCA.
| Clause | What it requires | Evidenced by |
|---|---|---|
| IT service management provisions (paragraph number unverified) | Keep an IT service management framework with policies and procedures for change, release, incident and problem management to keep the IT environment stable.Source: mondaq.com | Change records, release states (merged, deployed, working) and incident records linked to changes. |
| IT risk management framework (paragraph number unverified) | The governing body oversees an IT risk management framework proportionate to the institution's size, risk appetite and complexity.Source: moonstone.co.za | Board scorecards: change failure rate, open exceptions and supplier performance. |
Clause references and requirements were read on 8 November 2026. Paragraph numbers are not yet confirmed against the official text, so we cite the provisions by heading. Aspian Cloud evidences these clauses; it doesn’t make you compliant, and your assessor decides.
Want the mapping for a framework we don’t list? Ask us. A new framework is a data file, not a code change.
See what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.