On 26 March 2026, four National Bank of Ethiopia directives took effect together as a single overhaul of insurance-sector governance. Most of the attention since has gone to Directive No. SIB/63/2026 on persons with significant influence and to the broker qualification rules in SIB/62/2026. The directive text itself, Directive No. SIB/64/2026 on the external auditor of an insurance company, has had less. It deserves more, because it ends a practice that was routine across Ethiopian insurers: keeping the same audit firm for as long as the relationship worked, sometimes a decade or longer, with no structural check on how comfortable that relationship had become.
Who this is for: Company Secretaries and Legal Counsel who run tender and NBE-filing processes for Ethiopian insurers, working alongside the Risk Managers and Internal Auditors who sit with them on the audit committee.
What counted as normal before this directive
Before SIB/64/2026, an Ethiopian insurer's board could reappoint the same external auditor year after year, indefinitely, provided nothing else in the audit relationship raised a flag. Reappointment was typically a formality on the annual general meeting agenda rather than a competitive decision, and nothing in the prior framework asked the board to test whether the auditor had grown too close to management to see clearly. A long-serving audit partner might know the finance director socially, might have audited the same balance sheet so many times that unusual entries stopped looking unusual, or might simply be reluctant to raise a hard question with a client of fifteen years. None of that is misconduct. It is exactly the kind of slow erosion of professional scepticism that rotation rules exist to interrupt before it becomes a problem nobody inside the relationship can see.
What the six-year clock actually counts
SIB/64/2026 caps an external auditor's tenure at two consecutive three-year terms, six years in total, after which the insurer must change auditor. A firm that reaches the cap cannot simply be reappointed for a seventh year. The directive also sets a three-year cool-off period before that same firm can be considered again, so an insurer cannot rotate out an auditor in year six and quietly rotate the same firm back in year seven. Independence rules reach beyond the audit firm's institutional name, too: no individual who was employed by the insurer itself in the preceding three years may sit on the audit engagement team, closing the smaller but just as real gap of a former staff member auditing their own recent decisions.
Reappointment is no longer just a board vote, either. Every appointment or reappointment of an external auditor now requires the National Bank of Ethiopia's approval, which the directive commits to processing within 20 working days. State-owned insurers, principally the Ethiopian Insurance Corporation, are carved out of the competitive-bidding requirement below and instead engage the Office of the Federal Auditor General or its designated appointees, reflecting the different accountability structure a public insurer already sits inside.
Why the bidding process matters as much as the term limit
A term limit on its own only forces a change of name. What makes SIB/64/2026 a genuine independence rule is that it pairs the six-year cap with a requirement for insurers to appoint their external auditor through competitive, open bidding, rather than a board simply selecting a preferred firm. That closes a second, quieter version of the same problem: an insurer that rotates auditors on paper every six years but always chooses from the same small circle of familiar firms, chosen informally rather than tested against alternatives, has satisfied the letter of a rotation rule while missing its point entirely. Open bidding forces the audit committee to document why it chose the firm it chose, against real alternatives, on a record NBE can review.
Building the audit-committee file before the next tender
Insurers do not need to wait for their current auditor's term to lapse to start building the evidence a tender and an NBE filing will require:
- Map every current external audit relationship against the six-year clock, counting from when the current term actually began, not from when the firm was first engaged under the old, uncapped regime.
- Draft a standing competitive-bidding procedure now, covering how firms are shortlisted, what the evaluation criteria are, and who signs off on the final selection, so the next tender runs from a template rather than being improvised under time pressure.
- Confirm, in writing, that no member of the proposed engagement team was employed by the insurer within the past three years, and keep that confirmation on file alongside the engagement letter.
- Calendar the 20-working-day NBE approval window well ahead of the financial year-end audit cycle, so a pending approval never becomes the reason a statutory audit opinion is late.
- Record the board or audit committee's rationale for the selected firm in minutes, including which alternatives were considered, even when the incumbent wins a fresh, independently-run tender.
Why long, informal auditor relationships were the default, not the exception
Ethiopian insurers, like much of the country's private financial sector, grew up in a business culture where a trusted adviser earns the right to stay for decades, and changing that adviser can read as a loss of confidence in the relationship rather than a routine governance step. That instinct is not wrong on its own terms; a long relationship can carry real institutional knowledge. But it is precisely the instinct a rotation rule is designed to override, because the risk it manages, an auditor whose judgement has quietly softened through familiarity, does not announce itself. It only ever shows up as a professional scepticism failure at the moment a real problem needs catching, which is the worst possible time to discover it. Framing the six-year change to a board or a founder-shareholder as a regulatory requirement rather than a verdict on the outgoing firm's competence makes the conversation considerably easier.
Where this sits next to the rest of 2026's audit-independence conversation
This is not an isolated concern this year. Ethiopian boards have also had to think about audit independence from a different angle after ECMA licensed Deloitte Ethiopia as an investment bank in August, raising the question of whether an audit firm should also run a client's capital-markets transaction in the same period. SIB/64/2026 approaches the same underlying worry, that closeness between an institution and its trusted adviser can quietly compromise independence, from the opposite direction: not who else the firm works for, but how long it has worked for you. An insurer's audit committee that has internalised one lesson should recognise the other immediately.
Building rotation, competitive bidding and engagement-team independence into a standing audit-committee calendar, rather than rediscovering the rule at the six-year mark, is the kind of control-testing discipline DaraCorp's Risk Management & Compliance course is built around, and it pairs naturally with Code of Conduct & Ethics for the wider independence standard the directive's engagement-team rule now expects boards to apply.
This article describes how Ethiopian insurers are preparing for Directive No. SIB/64/2026 and is not legal advice or a definitive interpretation of the directive. Confirm your institution's specific tendering, approval and timing obligations against the primary source at nbe.gov.et and take professional advice on your organisation's particular circumstances.