Qatar Central Bank Cloud Computing Regulation (2024) 23: Seek any exemption from QCB with a linked requirement, business case, approvals, a register entry and an expiry date

What does 23 require?

An entity seeking exemption from any requirement of the regulation requests it from QCB, whose approval is required; links the request to the specific requirement it seeks to waive; supports it with a clear documented business case or rationale; has the right people or authority levels approve it consistently; records approved exemptions in an exemptions register with an expiry date by which the gap must be mitigated or closed; and remains accountable for the risks of approved exemptions.