Rwanda’s central bank is placing technology at the heart of its operations, with cybersecurity and institutional resilience central to the discussion.

In episode 20 of The NBR Podcast, published on 2 November 2025, Bertrand Ndengeyingoma—introduced as the National Bank of Rwanda’s Chief Technology Innovation Officer—explained how its ICT Directorate supports the institution’s work. His account offers a starting point for a wider African debate: how can financial institutions modernize while maintaining public confidence? 

Technology behind the central bank’s mandate

Ndengeyingoma connected the directorate’s responsibilities to price stability, financial stability and financial inclusion. Its remit includes business applications, the infrastructure supporting them and security.

He described a transformation strategy built around reviewing departmental processes, identifying gaps and designing improvements. Strengthening architecture across applications, data, infrastructure and business processes was a priority. 

For readers outside the technology sector, the significance is practical. Digital transformation should improve how an institution works: how information moves, how responsibilities are assigned and how services remain available when something goes wrong.

Buying software is only one part of that process. The larger challenge is ensuring that systems support the institution’s objectives and that employees can use them effectively.

Artificial intelligence: exploration before implementation

During the interview, Ndengeyingoma said the bank was exploring departmental AI use cases while considering the policies and regulations needed for implementation. Those remarks describe the position in November 2025; they do not confirm that the projects have since entered production. 

The broader question for African financial institutions is how to judge whether automation is useful. A sound assessment should ask what problem a tool addresses, who remains accountable and how its results can be checked.

Faster processing has limited value if mistakes become harder to detect. For institutions responsible for financial confidence, reliability and accountability deserve as much attention as speed.

Cybersecurity includes people

Ndengeyingoma emphasized threat monitoring, risk assessment, rapid response and service resilience. He also highlighted phishing and scams, encouraging users to question suspicious links, use official banking platforms and update devices. Staff training and practical exercises formed part of the bank’s awareness efforts. 

That emphasis makes cybersecurity relevant beyond specialist departments. An employee responding to an unexpected message or a customer following an unfamiliar payment link can become part of a security incident.

The editorial implication is straightforward: digital education should accompany digital services. Customers need understandable guidance, while employees need clear procedures for recognizing and reporting suspicious activity.

Four habits readers can adopt

Supplementing the interview, guidance from the US Cybersecurity and Infrastructure Security Agency identifies four basic protective habits:

• Use strong, unique passwords. A password manager can help generate and store them.
• Enable multifactor authentication. This adds protection beyond a password.
• Recognize and report phishing. Watch for alarming messages, unusual requests and misleading links.
• Keep software updated. Updates deliver fixes for security weaknesses. 

These are supplementary recommendations from CISA, rather than a verbatim checklist from Ndengeyingoma’s interview.

What African institutions can take from the discussion

The episode invites a more demanding assessment of financial modernization. New platforms should be judged by whether they improve service, support sound decisions and withstand disruption.

For institutions, that means connecting technology investment with operational needs and clear accountability. For the public, it means building protective habits alongside growing use of digital services.

Rwanda’s experience, as described in this interview, provides material for that conversation. Its longer-term value will depend on how strategy translates into dependable services and measurable improvements.

Listen: Strengthening Systems: ICTD’s Critical Role at the NBR⁠

---