The Africa Financial Professional (AFP) programme: 14 professional tracks, each with progressive levels.
The Africa Financial Professional (AFP) certification programme is the pan-African reference for training and certifying cybersecurity professionals in the financial sector. Developed by ACRC (Africa Cybersecurity Resource Center) under the ADFI grant of the African Development Bank, it covers every digital security profession in financial institutions across the WAEMU and CEMAC zones and pan-African markets.
AFP-RA
The AFP Risk Analyst track trains professionals able to identify, assess and treat cyber risks in African financial institutions, in line with BCEAO and BEAC requirements and the DORA/ISO 27005 standards.
AFP-PE
The AFP Pentester track trains penetration testers specialised in African banking, card payment and fintech environments. The ACRC Cyber Range is the technical foundation for hands-on learning and exams.
AFP-Gouv
The AFP Information Security Governance track prepares professionals to design, run and audit information security management systems (ISMS) in African financial institutions, in line with ISO 27001, COBIT and BCEAO/BEAC directives.
AFP-DG
The AFP-DG track is designed for chief executives, board members and executive directors of African financial institutions. It enables them to fully exercise their cyber governance responsibility without prior technical expertise, by building their capacity for strategic decision-making in the face of digital risks.
AFP-ACP
The AFP-ACP track is designed for internal auditors, permanent controllers and inspectors responsible for assessing the security and compliance of information systems in African financial institutions.
AFP-DSI
The AFP-DSI track trains IT directors and their management teams to fully exercise their responsibility for information system security, secure architecture and resilient digital transformation in African financial institutions.
AFP-RSSI
The AFP-RSSI track is ACRC's flagship programme for professionals who hold or aspire to the CISO role in African financial institutions. It covers the full spectrum: strategy, operations, compliance, crisis management and institutional communication.
AFP-CTI
The AFP-CTI track trains analysts and strategists specialised in collecting, analysing and using cyber threat intelligence, with a focus on malicious actors targeting African financial institutions (fraud, APT groups, organised cybercrime). The ACRC Cyber Range includes a MISP platform and real CTI feeds for the exercises.
AFP-DPO
The AFP-DPO track trains data protection officers (DPOs) and compliance teams in African financial institutions to master the legal framework for personal data protection (national laws, the Malabo Convention, the GDPR for exposed entities) and to deploy operational compliance programmes.
AFP-FIN
The AFP-FIN track trains digital investigators and forensic analysts specialised in African banking and financial environments. It covers post-incident investigation, collection of legal evidence, analysis of digital fraud and preparation of court files under WAEMU, CEMAC and OHADA legislation. The ACRC Cyber Range has dedicated forensic environments.
AFP-AI
The AFP-AI track prepares African finance and cybersecurity professionals to use artificial intelligence as a lever for operational effectiveness, threat detection and automation of low-value tasks. It covers generative AI, machine learning applied to security, no-code/low-code tools, and the specific risks AI poses to financial institutions. A cross-cutting track, it is open to all AFP profiles.
AFP-EXL
The AFP-EXL track is ACRC's distinctive programme on the African market: it bridges the gap between technical command of cybersecurity and the ability to exert real influence at board, executive committee and regulator level. It is designed for professionals who master their field but want to develop their executive presence: impactful communication, decision-making under pressure, leadership in a crisis, and high-level stakeholder management. Intensive coaching format, delivered by certified coaches and former executives of the African financial sector.
AFP-GAI
AFP-GAI is a short, highly practical and immediately applicable programme for cybersecurity professionals who want to bring generative AI tools into their day-to-day work, without being data scientists. Two intensive courses, independent and combinable, each focused on a concrete use: one for operational staff and analysts, the other for managers and decision-makers. Exclusively hands-on, with live access to the tools during the training. A certification is awarded at the end of each course.
AFP-CISO101
AFP-CISO101 is the onboarding and support programme for CISOs taking up the role for the first time or moving to a new institution in the African financial sector. A format unique on the market: 5 days of intensive training covering the CISO's first 100 days, followed by 3 months of monthly individual coaching with an experienced CISO mentor from the ACRC community. The ACRC community plays a central role: volunteer mentors, shared lessons learned, access to a peer network. A single certification level, but a transformative experience.
The AFP programme benefits from training facilities unique in West and Central Africa:
Virtualised infrastructure simulating the African banking ecosystem (core banking, SWIFT, ATM networks, mobile money, API banking, Active Directory, SIEM). Used for all technical practical work and for the exams of the AFP-PE, AFP-DSI, AFP-ACP and AFP-RSSI tracks.
Dedicated crisis simulation room, equipped to reproduce the conditions of an operational crisis cell (real-time monitoring screens, simulated alert feeds, regulatory interfaces, media room). Used in every AFP track for crisis management exercises.
Applications are received by ACRC through the online certification portal or directly by the secretariat. Admission is granted once the prerequisites have been checked. For Practitioner level and above, a certificate of professional experience is required.
AFP certifications are valid for 3 years. Renewal requires continuing education (at least 21 hours over 3 years) and a refresher assessment. Instructors must deliver at least 2 sessions a year to keep their accreditation.
The AFP framework, training materials, exams and the Cyber Range and ROOM#42 scenarios are the exclusive property of ACRC. Any reproduction, distribution or commercial use without ACRC's prior written consent is strictly prohibited.
We use cookies required for the site to work and, with your consent, audience-measurement cookies. Cookie policy
