Whilst the Bank of Tanzania (BOT) does not appear to have a cyber-specific assurance scheme in place; it does detail (on its website) what is expected by way of supervisory methodology and tools to actively manage risks. The BOT also maintains a list of approved external auditors to carry out onsite and offsite surveillance. Tanzania is already on the path to gain a Level 3 rating.