Free readiness checklists for NIS2, DORA, ISO 27001, PCI DSS, POPIA, JS2 and Southern Africa.Get a checklist →

Free checklist · South Africa

Are you ready for your first JS2 review cycle?

Joint Standard 2 of 2024 has applied to South African financial institutions since 1 June 2025. This checklist turns it into 21 checks you can work through with your team.

What's inside

21 checks across 5 areas.

Each check gives the Joint Standard paragraph it comes from and the evidence an auditor would expect to see.

  • Governance and strategy (5 checks)
  • Testing (5 checks)
  • Remediation (3 checks)
  • Third parties (4 checks)
  • Incidents (4 checks)

Who it's for

  • Banks, mutual banks and insurers
  • CIS managers, discretionary and administrative FSPs
  • Pension funds and benefit administrators
  • Market infrastructures, OTC derivative providers and credit rating agencies
1 June 2025JS2 came into effect
AnnualFramework review and penetration testing cycle

Get the free checklist

Tell us where to send it. The PDF opens as soon as you submit.

You don't need to tick the box to get the checklist. SecuriCentrix Ltd uses your details to send you this checklist and, only if you tick the box, occasional marketing emails. You can object to marketing at any time. See our Privacy Policy.

How it works

Built for the conversation with your board and regulator.

Plain-English checks

Each requirement is written as something you can check, with the paragraph or section it comes from.

Evidence to keep

Every check lists the documents a supervisor or auditor would expect to see.

A simple score

Tick Ready, Partial or Gap for each check, add up your score, and see where to start.

Want a second pair of eyes?

Book a 30-minute review to go through your score, your biggest gaps and a practical plan to close them.