{"id":70645,"date":"2026-09-18T18:33:27","date_gmt":"2026-09-18T16:33:27","guid":{"rendered":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/"},"modified":"2026-09-20T10:46:54","modified_gmt":"2026-09-20T08:46:54","slug":"uae-oprisk-rule-resilience-grc-role-shift","status":"publish","type":"post","link":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/","title":{"rendered":"UAE: New OpRisk Rule Shifts GRC From Control to Resilience"},"content":{"rendered":"<div id=\"sgce-a\" class=\"sgce-article\">\n<p class=\"rc-lede\">On 14 September 2026, the Operational Risk and Operational Resilience Regulation of the Central Bank of the United Arab Emirates came into force, as Gulf News reports. Regulation No. C 1\/2026 was issued back in February 2026 and replaces the 2018 framework. It applies to all licensed financial institutions with their own legal personality, not only banks. At its core lies a shift in benchmark: what counts is no longer the avoidance of operational losses, but the demonstrable ability to maintain operations, adapt, recover and learn from incidents. For GRC functions it is worth examining what this role shift structurally requires.<\/p>\n<div class=\"rc-tldr\">\n<div class=\"rc-tldr-label\">In short<\/div>\n<p>The Operational Risk and Operational Resilience Regulation of the Central Bank of the UAE, in force since 14 September 2026, no longer measures institutions by loss avoidance but by demonstrable recovery capability. Institutions must set disruption tolerances for every critical operation, test recovery instead of documenting it, and report severe incidents within four hours, followed by a summary report within 24 hours.<\/p>\n<\/div>\n<nav class=\"rc-toc\" aria-label=\"Contents\">\n<div class=\"rc-toc-label\">Contents<\/div>\n<ol>\n<li><a href=\"#a1-what-exactly-does-the-new-regulation-rep\">What exactly does the new regulation replace?<\/a><\/li>\n<li><a href=\"#a2-why-does-operational-resilience-become-t\">Why does operational resilience become the new benchmark?<\/a><\/li>\n<li><a href=\"#a3-what-does-this-mean-for-the-three-lines-\">What does this mean for the three lines of defense?<\/a><\/li>\n<li><a href=\"#a4-what-consequences-apply-in-the-case-of-b\">What consequences apply in the case of breaches?<\/a><\/li>\n<li><a href=\"#a5-what-does-this-mean-structurally-for-a-g\">What does this mean structurally for a GRC function?<\/a><\/li>\n<li><a href=\"#a6-how-can-this-role-shift-be-prepared-for-\">How can this role shift be prepared for in concrete terms?<\/a><\/li>\n<\/ol>\n<\/nav>\n<h2 id=\"a1-what-exactly-does-the-new-regulation-rep\">What exactly does the new regulation replace?<\/h2>\n<p>The <a href=\"https:\/\/gulfnews.com\/business\/banking\/uae-overhauls-bank-risk-rules-4-hour-reporting-cyber-tests-and-tougher-penalties-1.500675080\" target=\"_blank\" rel=\"noopener nofollow\">Operational Risk Management Regulation<\/a> of the Central Bank of the UAE, known as Regulation No. C 1\/2026, fully replaces Circular No. 163\/2018 on Operational Risk Management and its associated standards.<\/p>\n<p>The regulation applies to all licensed financial institutions with their own legal personality, and is therefore not limited to banks. The Central Bank can impose additional requirements where needed and issue further standards or guidance. The framework therefore remains open to expansion rather than being closed once it takes effect.<\/p>\n<p>Its timing fits into a larger picture. The regulation was issued as early as February 2026 as one of the implementing regulations under the new Central Bank Law, Federal Decree-Law No. 6 of 2025, which came into force on 16 September 2025, as the law firm Hadef &amp; Partners sets out. Article 184 of that law gave institutions one year to reconcile their position with its provisions, which produced the deadline of 15 September 2026. The new operational risk regulation therefore takes effect exactly one day before that deadline. Anyone who treated the deadline as a purely licensing and corporate law date may have underestimated the operational part.<\/p>\n<h2 id=\"a2-why-does-operational-resilience-become-t\">Why does operational resilience become the new benchmark?<\/h2>\n<p>The framework shifts the focus from the traditional avoidance of operational losses toward building institutions that can maintain operations, adapt, recover and learn from incidents.<\/p>\n<p>The concrete lever for this is disruption tolerances. Institutions must identify critical operations whose failure could cause significant harm to customers, the institution itself or the financial system, and set a clearly defined tolerance for each of them: the maximum acceptable duration of an interruption and the level of impact that can still be borne. Depending on the business, these operations include transfers and payments, account access and salary processing, and the operation of all types of cards. The evidence therefore shifts from the existence of a recovery plan to the ability to deliver or restore the service within predefined timeframes and tolerances.<\/p>\n<p>Compared with the 2018 framework, new elements include operational resilience, identification of critical operations, dependency mapping, cybersecurity, third-party risk management, stress and penetration testing, four-hour incident reporting, change management, customer protection, data governance and public disclosure.<\/p>\n<p>The reporting obligation is staged rather than limited to a single deadline. If an event has, or is likely to have, a significant impact on the continuity and safety of critical operations, the institution must notify the Central Bank within <a href=\"https:\/\/gulfnews.com\/business\/banking\/new-uae-central-bank-rules-target-outages-fraud-and-cyberattacks-1.500674991\" target=\"_blank\" rel=\"noopener nofollow\">four hours<\/a> and identify the operations affected. Within 24 hours, a brief report follows on the nature of the incident, the measures taken, its potential impact and the expected timeframe for restoring normal operations. Once normal operations resume, the Central Bank must be informed again. For high-severity incidents under the institution&#8217;s own classification criteria, a further notification applies within 72 hours. Which operations count as critical and how they are prioritized is a question that the <a href=\"https:\/\/swissgrc.com\/ar\/eba-guidelines-critical-functions-first\/\">EBA Guidelines on critical functions<\/a> also raise for European institutions.<\/p>\n<h2 id=\"a3-what-does-this-mean-for-the-three-lines-\">What does this mean for the three lines of defense?<\/h2>\n<p>The regulation reaffirms the three lines of defense model, requires an independent operational risk function headed by the Chief Risk Officer, and explicitly extends accountability up to senior management and the board.<\/p>\n<p>Business lines, as the first line, provide continuous identification, assessment and control of risks in day-to-day operations. Risk management and compliance, as the second line, provide relatively independent oversight and challenge first-line decisions where necessary. Internal audit, as the third line, provides independent assurance on the effectiveness of the framework. The independent operational risk function must be sufficiently resourced and must develop its own view of material risks, assess the effectiveness of internal controls, review the operational risk profile, identify threats and vulnerabilities affecting critical operations, and provide training and risk awareness.<\/p>\n<p>The split of roles at the top is explicit: the board approves strategies, policies and risk appetite, while senior management implements them and ensures appropriate systems, resources and qualified staff. This structure is not new, but it now faces a sharper test: what counts is not the existence of the three lines, but whether they can deliver a shared situational picture within four hours in an actual event. How the interplay of the three lines shifts overall is described in the new Three Lines Model of the IIA Guidance.<!-- TODO: EN-Link zum Three-Lines-Model-Beitrag ergaenzen, sobald die englische Fassung online ist --><\/p>\n<h2 id=\"a4-what-consequences-apply-in-the-case-of-b\">What consequences apply in the case of breaches?<\/h2>\n<p>These are enforceable regulatory obligations, not voluntary guidelines. Breaches can trigger supervisory measures and administrative or financial sanctions, which can extend to the temporary external administration of the institution.<\/p>\n<p>The catalogue of measures also includes the removal, replacement or restriction of the powers of senior management or board members, fines, and a ban from operating in the UAE financial sector. This range shows that the supervisor addresses not only the institution but also the individuals in charge at the top. For the GRC function, this means that evidence must be documented not only for the compliance department, but for the personal accountability of senior management.<\/p>\n<h2 id=\"a5-what-does-this-mean-structurally-for-a-g\">What does this mean structurally for a GRC function?<\/h2>\n<p>A GRC function must be able to demonstrate that it knows its critical operations, has mapped their dependencies, and tests recovery rather than merely documenting risks.<\/p>\n<p>The testing is prescribed in concrete terms. Institutions must conduct periodic operational risk stress tests, including assessments of the control environment and penetration testing. For critical functions, periodic testing must include a penetration test carried out by an independent external party, with the results presented to the board. Business continuity and disaster recovery plans are not merely to be maintained, but exercised under severe but plausible scenarios.<\/p>\n<p>Financial institutions must also implement a framework for ICT and cyber risk covering risk identification and assessment, mitigation measures, incident response and recovery, change management, data and technology services and patch management. Incident management must cover the entire incident lifecycle, from detection, classification and containment through service recovery to root cause analysis and measures to prevent recurrence. Internal and external fraud becomes an explicit part of the operational risk framework, and therefore something to be identified, assessed, monitored, reported and mitigated rather than left to security or compliance alone.<\/p>\n<p>The link to customer protection is also new. Where operational changes leave customers with materially inaccurate information, such as payment confirmations, debits and credits or account balances, institutions must clearly explain how accounts and transactions have been affected. Institutions are liable for losses customers suffer as a result of institutional errors, in line with the Central Bank&#8217;s consumer protection regulations. Where third parties are part of critical operations, third-party risk management requires governance that goes beyond a mere supplier register, as also described in the article on Third-Party Risk Governance.<!-- TODO: EN-Link zum TPRM-Governance-Beitrag ergaenzen, sobald die englische Fassung online ist --><\/p>\n<h2 id=\"a6-how-can-this-role-shift-be-prepared-for-\">How can this role shift be prepared for in concrete terms?<\/h2>\n<p>A first, verifiable step is for the risk committee to validate the register of critical operations at its next ordinary meeting and to decide a disruption tolerance for each operation, meaning a maximum outage duration and a bearable level of impact.<\/p>\n<p>Building on that, a dependency map is worth assembling that brings together systems, data, staff and third-party providers per critical operation, together with a test of the business continuity plans that measures actual recovery time against the agreed tolerance rather than documentation. It is equally worth running through the full escalation chain once, from detected incident to the four-hour notification and the 24-hour summary report. Institutions outside the UAE would do well to apply the same benchmark already, even without an immediate reporting obligation to a supervisor there. Anyone who only tests recovery capability once a supervisor asks for it is testing too late.<\/p>\n<div class=\"rc-bridge\">\n<div class=\"rc-bridge-mark\"><\/div>\n<div>\n<div class=\"rc-bridge-label\">Related<\/div>\n<h3>Demonstrable resilience instead of pure risk control<\/h3>\n<p>The Operational Resilience solution maps critical operations, their dependencies and the disruption tolerances set for them. It documents recovery times and test results in a traceable way.<\/p>\n<p><a href=\"https:\/\/swissgrc.com\/ar\/operational-resilience-software\/\">Operational Resilience <span class=\"rc-pfeil\" aria-hidden=\"true\"><\/span><\/a><\/div>\n<\/div>\n<aside class=\"rc-takeaways\">\n<div class=\"rc-takeaways-label\">For practice<\/div>\n<h2>Key points<\/h2>\n<ul>\n<li>The benchmark shifts from loss avoidance to demonstrable recovery capability of critical operations.<\/li>\n<li>For every critical operation, a maximum outage duration and a bearable level of impact must be defined.<\/li>\n<li>Reporting is staged: four hours for the initial notification, 24 hours for the summary report, 72 hours for high-severity incidents.<\/li>\n<li>Critical functions require a penetration test by an independent external party, with results presented to the board.<\/li>\n<li>Accountability extends up to senior management and the board, and is sanctioned accordingly.<\/li>\n<li>Customer protection becomes part of operational risk: the institution is liable for customer losses caused by its own errors.<\/li>\n<\/ul>\n<\/aside>\n<section class=\"rc-faq\">\n<div class=\"rc-faq-head\">\n<div class=\"rc-faq-label\">FAQ<\/div>\n<h2>Frequently asked questions<\/h2>\n<\/div>\n<div class=\"rc-faq-list\">\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">Since when has the UAE Central Bank&#8217;s new Operational Risk Management Regulation been in force?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>Regulation No. C 1\/2026 was issued in February 2026 and came into force on 14 September 2026. It fully replaces the previous 2018 framework and has since applied directly to all licensed financial institutions in the country.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">Which institutions does Regulation No. C 1\/2026 apply to?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>Regulation No. C 1\/2026 applies to all licensed financial institutions with their own legal personality in the United Arab Emirates, not only banks. The Central Bank can additionally impose further requirements or issue further standards and guidance at any time, which keeps the framework open to expansion.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">What is a disruption tolerance and what must it be set for?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>For each critical operation, institutions must set a clearly defined disruption tolerance, consisting of the maximum acceptable duration of an interruption and the level of impact that can still be borne. The evidence therefore shifts from the existence of a recovery plan to the ability to deliver or restore the service within predefined timeframes and tolerances.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">How much time do institutions have to report a critical operational incident?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>The initial notification to the Central Bank must be made within four hours, identifying the critical operations affected. Within 24 hours, a brief report follows on the nature of the incident, the measures taken, its potential impact and the expected timeframe for restoring normal operations; the return to normal operations must also be reported. For high-severity incidents under the institution&#8217;s own classification criteria, a further deadline of 72 hours applies.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">What testing does the regulation require in concrete terms?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>It requires periodic operational risk stress tests including assessments of the control environment, as well as penetration testing. For critical functions, periodic testing must include a penetration test carried out by an independent external party, with the results presented to the board. Business continuity and disaster recovery plans must be exercised under severe but plausible scenarios.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">What is new compared with the previous 2018 framework?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>New elements include operational resilience, identification of critical operations, dependency mapping, cybersecurity, third-party risk management, stress and penetration testing, four-hour incident reporting, change management, customer protection, data governance and public disclosure. These topics move from being voluntary additions to mandatory components that institutions must implement in a demonstrable way.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">Do institutions outside the UAE also need to take the new regulation into account?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>The regulation does not create an immediate reporting obligation to a supervisor outside the UAE. It is nonetheless advisable to apply the same benchmark of demonstrable recovery capability already, since testing only after a supervisor asks for it comes too late, rather than acting proactively.<\/p>\n<\/div>\n<\/details>\n<\/div>\n<\/section>\n<section class=\"rc-sources\">\n<div class=\"rc-sources-label\">Sources<\/div>\n<ol>\n<li><a href=\"https:\/\/gulfnews.com\/business\/banking\/uae-overhauls-bank-risk-rules-4-hour-reporting-cyber-tests-and-tougher-penalties-1.500675080\" target=\"_blank\" rel=\"noopener nofollow\">UAE overhauls bank risk rules: 4-hour reporting, cyber tests and tougher penalties<\/a><span class=\"rc-source-pub\">Gulf News<\/span><\/li>\n<li><a href=\"https:\/\/gulfnews.com\/business\/banking\/new-uae-central-bank-rules-target-outages-fraud-and-cyberattacks-1.500674991\" target=\"_blank\" rel=\"noopener nofollow\">New UAE Central Bank rules target outages, fraud and cyberattacks<\/a><span class=\"rc-source-pub\">Gulf News<\/span><\/li>\n<li><a href=\"https:\/\/www.arabianbusiness.com\/finance\/banking\/uae-central-bank-targets-banking-apps-and-card-disruption-with-tougher-risk-rules\" target=\"_blank\" rel=\"noopener nofollow\">UAE Central Bank targets banking apps and card disruption with tougher risk rules<\/a><span class=\"rc-source-pub\">Arabian Business<\/span><\/li>\n<li><a href=\"https:\/\/hadefpartners.com\/news-insights\/insights\/uae-central-bank-law-2026-developments-and-the-september-2026-reconciliation-deadline\/\" target=\"_blank\" rel=\"noopener nofollow\">UAE Central Bank Law: 2026 Developments and the September 2026 Reconciliation Deadline<\/a><span class=\"rc-source-pub\">Hadef &amp; Partners<\/span><\/li>\n<li><a href=\"https:\/\/rulebook.centralbank.ae\/en\/rulebook\/operational-risk-regulation\" target=\"_blank\" rel=\"noopener nofollow\">Operational Risk Regulation C 163\/2018<\/a><span class=\"rc-source-pub\">Central Bank of the UAE, Rulebook<\/span><\/li>\n<li><a href=\"https:\/\/www.dubaistandard.com\/uae-overhauls-bank-risk-rules-with-four-hour-reporting-cyber-tests-and-tougher-penalties\/\" target=\"_blank\" rel=\"noopener nofollow\">UAE Overhauls Bank Risk Rules With Four-Hour Reporting, Cyber Tests and Tougher Penalties<\/a><span class=\"rc-source-pub\">Dubai Standard<\/span><\/li>\n<\/ol>\n<\/section>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The new Operational Risk Management Regulation of the Central Bank of the UAE, in force since 14 September 2026, no longer measures institutions by loss avoidance but by demonstrable recovery capability. For GRC functions this means mapping critical operations, testing recovery instead of documenting it, and anchoring accountability up to senior management and the board in a demonstrable way.<\/p>\n","protected":false},"author":5,"featured_media":70646,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","_swissgrc_real_author":"Rajeev Dutt","real_author_title":"Managing Director MEA & APAC","real_author_bio":"Builds the presence of Swiss GRC in Dubai and across the markets of the Middle East, Africa and Asia, seeing first-hand how differently local regulators interpret governance and compliance. This cross-jurisdictional perspective shapes his view of international markets.","real_author_photo":54679,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[105],"tags":[155,208,209,210,211],"class_list":["post-70645","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-regulation-supervision","tag-third-party-risk-management","tag-operational-resilience","tag-three-lines-of-defense","tag-business-continuity-uae","tag-uae-central-bank-regulation"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"The UAE&#039;s Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"superadmin\"\/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"ar_AR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC AR | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"UAE OpRisk Regulation 2026: From Control to Resilience\" \/>\n\t\t<meta property=\"og:description\" content=\"The UAE&#039;s Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/09\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/09\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-09-18T16:33:27+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-20T08:46:54+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"UAE OpRisk Regulation 2026: From Control to Resilience\" \/>\n\t\t<meta name=\"twitter:description\" content=\"The UAE&#039;s Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/09\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"superadmin\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#blogposting\",\"name\":\"UAE OpRisk Regulation 2026: From Control to Resilience\",\"headline\":\"UAE: New OpRisk Rule Shifts GRC From Control to Resilience\",\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/09\\\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp\",\"width\":1200,\"height\":630,\"caption\":\"Swiss GRC article image showing the logo and an abstract shield graphic in blue, category Regulation & Supervision\"},\"datePublished\":\"2026-09-18T18:33:27+02:00\",\"dateModified\":\"2026-09-20T10:46:54+02:00\",\"inLanguage\":\"ar\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#webpage\"},\"articleSection\":\"Regulation &amp; Supervision, Third-Party Risk Management, operational resilience, three lines of defense, business continuity UAE, UAE Central Bank regulation\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/regulation-supervision\\\/#listItem\",\"name\":\"Regulation &amp; Supervision\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/regulation-supervision\\\/#listItem\",\"position\":2,\"name\":\"Regulation &amp; Supervision\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/regulation-supervision\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#listItem\",\"name\":\"UAE: New OpRisk Rule Shifts GRC From Control to Resilience\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#listItem\",\"position\":3,\"name\":\"UAE: New OpRisk Rule Shifts GRC From Control to Resilience\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/category\\\/regulation-supervision\\\/#listItem\",\"name\":\"Regulation &amp; Supervision\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/#author\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/\",\"name\":\"superadmin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/75672523c5e2db95feb2c8c3d6cf134b011e26e6f14621731855ff4a8c3327d7?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"superadmin\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/\",\"name\":\"UAE OpRisk Regulation 2026: From Control to Resilience\",\"description\":\"The UAE's Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.\",\"inLanguage\":\"ar\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/author\\\/superadmin\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/09\\\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#mainImage\",\"width\":1200,\"height\":630,\"caption\":\"Swiss GRC article image showing the logo and an abstract shield graphic in blue, category Regulation & Supervision\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/uae-oprisk-rule-resilience-grc-role-shift\\\/#mainImage\"},\"datePublished\":\"2026-09-18T18:33:27+02:00\",\"dateModified\":\"2026-09-20T10:46:54+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"ar\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/ar\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>UAE OpRisk Regulation 2026: From Control to Resilience<\/title>\n\n","aioseo_head_json":{"title":"UAE OpRisk Regulation 2026: From Control to Resilience","description":"The UAE's Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.","canonical_url":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#blogposting","name":"UAE OpRisk Regulation 2026: From Control to Resilience","headline":"UAE: New OpRisk Rule Shifts GRC From Control to Resilience","author":{"@id":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/#author"},"publisher":{"@id":"https:\/\/swissgrc.com\/ar\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/09\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp","width":1200,"height":630,"caption":"Swiss GRC article image showing the logo and an abstract shield graphic in blue, category Regulation & Supervision"},"datePublished":"2026-09-18T18:33:27+02:00","dateModified":"2026-09-20T10:46:54+02:00","inLanguage":"ar","mainEntityOfPage":{"@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#webpage"},"isPartOf":{"@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#webpage"},"articleSection":"Regulation &amp; Supervision, Third-Party Risk Management, operational resilience, three lines of defense, business continuity UAE, UAE Central Bank regulation"},{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/ar\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/#listItem","name":"Regulation &amp; Supervision"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/#listItem","position":2,"name":"Regulation &amp; Supervision","item":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#listItem","name":"UAE: New OpRisk Rule Shifts GRC From Control to Resilience"},"previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#listItem","position":3,"name":"UAE: New OpRisk Rule Shifts GRC From Control to Resilience","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/#listItem","name":"Regulation &amp; Supervision"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/ar\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/ar\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"Person","@id":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/#author","url":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/","name":"superadmin","image":{"@type":"ImageObject","@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/75672523c5e2db95feb2c8c3d6cf134b011e26e6f14621731855ff4a8c3327d7?s=96&d=mm&r=g","width":96,"height":96,"caption":"superadmin"}},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#webpage","url":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/","name":"UAE OpRisk Regulation 2026: From Control to Resilience","description":"The UAE's Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.","inLanguage":"ar","isPartOf":{"@id":"https:\/\/swissgrc.com\/ar\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#breadcrumblist"},"author":{"@id":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/#author"},"creator":{"@id":"https:\/\/swissgrc.com\/ar\/author\/superadmin\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/09\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp","@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#mainImage","width":1200,"height":630,"caption":"Swiss GRC article image showing the logo and an abstract shield graphic in blue, category Regulation & Supervision"},"primaryImageOfPage":{"@id":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/#mainImage"},"datePublished":"2026-09-18T18:33:27+02:00","dateModified":"2026-09-20T10:46:54+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/ar\/#website","url":"https:\/\/swissgrc.com\/ar\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"ar","publisher":{"@id":"https:\/\/swissgrc.com\/ar\/#organization"}}]},"og:locale":"ar_AR","og:site_name":"Swiss GRC AR | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"UAE OpRisk Regulation 2026: From Control to Resilience","og:description":"The UAE's Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.","og:url":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/","og:image":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/09\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp","og:image:secure_url":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/09\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp","og:image:width":1200,"og:image:height":630,"article:published_time":"2026-09-18T16:33:27+00:00","article:modified_time":"2026-09-20T08:46:54+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"UAE OpRisk Regulation 2026: From Control to Resilience","twitter:description":"The UAE's Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.","twitter:creator":"@SwissGRC","twitter:image":"https:\/\/swissgrc.com\/ar\/wp-content\/uploads\/sites\/5\/2026\/09\/uae-oprisk-rule-resilience-grc-role-shift-swissgrc.webp","twitter:label1":"Written by","twitter:data1":"superadmin","twitter:label2":"Est. reading time","twitter:data2":"10 minutes"},"aioseo_meta_data":{"post_id":"70645","title":"UAE OpRisk Regulation 2026: From Control to Resilience","description":"The UAE's Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.","keywords":null,"keyphrases":{"focus":{"keyphrase":"UAE","score":0,"analysis":[]},"additional":[{"keyphrase":"operational resilience","score":65},{"keyphrase":"third-party risk management","score":78},{"keyphrase":"three lines of defense","score":69},{"keyphrase":"business continuity UAE","score":69},{"keyphrase":"UAE Central Bank regulation","score":69}]},"primary_term":null,"canonical_url":null,"og_title":"UAE OpRisk Regulation 2026: From Control to Resilience","og_description":"The UAE's Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.","og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":"UAE OpRisk Regulation 2026: From Control to Resilience","twitter_description":"The UAE's Operational Risk Management Regulation measures institutions by demonstrable resilience rather than loss avoidance. What this means for GRC functions.","schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-09-20 08:47:10","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-09-18 18:33:28","updated":"2026-09-20 12:31:47","focus_keyword":"UAE","additional_keywords":[{"word":"operational resilience","score":76,"items":{"introductionKeyword":{"score":9},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":9},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":2},"imageKeyphrase":{"score":3}}},{"word":"third-party risk management","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"three lines of defense","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"business continuity UAE","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"UAE Central Bank regulation","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}}],"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/ar\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/\" title=\"Regulation &amp; Supervision\">Regulation &amp; Supervision<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tUAE: New OpRisk Rule Shifts GRC From Control to Resilience\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/ar\/"},{"label":"Regulation &amp; Supervision","link":"https:\/\/swissgrc.com\/ar\/category\/regulation-supervision\/"},{"label":"UAE: New OpRisk Rule Shifts GRC From Control to Resilience","link":"https:\/\/swissgrc.com\/ar\/uae-oprisk-rule-resilience-grc-role-shift\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/70645","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/comments?post=70645"}],"version-history":[{"count":2,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/70645\/revisions"}],"predecessor-version":[{"id":70664,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/posts\/70645\/revisions\/70664"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/media\/70646"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/media?parent=70645"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/categories?post=70645"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swissgrc.com\/ar\/wp-json\/wp\/v2\/tags?post=70645"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}