Provides financial services, in Bahrain

Conventional Banks Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 1, Module OM, paragraphs OM-5.5.57 to OM-5.5.59 · Read the law's page

• This binds a conventional bank licensee of the Central Bank of Bahrain (reached by declaring that you are a bank). The rule was added in July 2021 and amended in April 2022.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident, internal or external, that compromises customer information or disrupts critical services that affect operations (OM-5.5.57).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (OM-5.5.57).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and customers, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (OM-5.5.58).

Conventional Banks Cyber Security Risk Management Rules, Central Bank of Bahrain Rulebook Volume 1, Module OM, paragraphs OM-5.5.22 to OM-5.5.56 · Read the law's page

• This binds a conventional bank licensee of the Central Bank of Bahrain (reached by declaring that you are a bank). The section was added in July 2021.
• Conduct periodic assessments of cyber threats and of the maturity, coverage and effectiveness of your cyber security controls, and regular technical assessments to identify vulnerabilities in systems, applications and network devices (OM-5.5.22, OM-5.5.23 and OM-5.5.25).
• Implement cyber security incident management processes for timely detection, response and recovery, including a Security Information and Event Management system, and establish a Security Operations Centre (OM-5.5.31 and OM-5.5.35).
• Identify the critical systems and services that must be recovered on a priority basis, and make sure they can recover from a cyber security breach within your defined recovery time objective (OM-5.5.45 and OM-5.5.48).
• Arrange to seek cyber risk insurance cover from a suitable insurer after a risk-based assessment (OM-5.5.53).
• Make sure all employees receive adequate cyber security training on a regular basis, and give role-specific training to the executive board, senior management, cyber security roles and IT staff (OM-5.5.55 and OM-5.5.56).
• Report cyber security incidents to the Central Bank of Bahrain on the clocks stated in the separate incident reporting row (OM-5.5.57 and OM-5.5.58).

Crypto-Asset Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 6, Module CRA, paragraphs CRA-5.8.33 to CRA-5.8.35 · Read the law's page

• This binds a crypto-asset licensee of the Central Bank of Bahrain (reached by declaring that you are a crypto-asset provider). The rule was added in April 2023.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident or an unplanned outage, internal or external, that compromises client information or disrupts critical services that affect operations (CRA-5.8.33).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (CRA-5.8.33).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and clients, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (CRA-5.8.34).

Insurance Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 3, Module RM, paragraphs RM-9.1.58 to RM-9.1.60 · Read the law's page

• This binds an insurance licensee of the Central Bank of Bahrain (reached by declaring that you are an insurer). The rule was added in January 2022 and amended in April 2022.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident, internal or external, that compromises customer information or disrupts critical services that affect operations (RM-9.1.58).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (RM-9.1.58).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and customers, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (RM-9.1.59).

Insurance Cyber Security Risk Management Rules, Central Bank of Bahrain Rulebook Volume 3, Module RM, paragraphs RM-9.1.1 to RM-9.1.57 · Read the law's page

• This binds an insurance licensee of the Central Bank of Bahrain (reached by declaring that you are an insurer). The section was added in October 2019 and amended in January 2022.
• Have your Board ensure a robust cyber security risk management framework, developed in accordance with the NIST Cyber security framework, that covers a cyber security strategy, policy and risk management approach, tools and methodology (RM-9.1.1 to RM-9.1.3).
• Implement cyber security incident management processes for timely detection, response and recovery, and assign the roles and resources to detect, investigate and respond to cyber incidents (RM-9.1.32 and RM-9.1.36).
• Identify the critical systems and services that must be recovered on a priority basis (RM-9.1.46).
• Arrange to seek cyber risk insurance cover from a suitable insurer after a risk-based assessment (RM-9.1.54).
• Make sure all employees receive adequate cyber security training on a regular basis (RM-9.1.56).
• Report cyber security incidents to the Central Bank of Bahrain on the clocks stated in the separate incident reporting row (RM-9.1.58 and RM-9.1.59).

Investment Business Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 4, Module RM, paragraphs RM-9.1.58 to RM-9.1.60 · Read the law's page

• This binds an investment business licensee of the Central Bank of Bahrain (reached by declaring that you are a securities firm). The rule was added in January 2022 and amended in April 2022.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident, internal or external, that compromises customer information or disrupts critical services that affect operations (RM-9.1.58).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (RM-9.1.58).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and customers, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (RM-9.1.59).

Islamic Banks Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 2, Module OM, paragraphs OM-5.5.57 to OM-5.5.59 · Read the law's page

• This binds an Islamic bank licensee of the Central Bank of Bahrain (reached by declaring that you are a bank). The rule was added in July 2021 and amended in April 2022.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident, internal or external, that compromises customer information or disrupts critical services that affect operations (OM-5.5.57).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (OM-5.5.57).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and customers, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (OM-5.5.58).