Is a bank, in Bahrain

Conventional Banks Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 1, Module OM, paragraphs OM-5.5.57 to OM-5.5.59 · Read the law's page

• This binds a conventional bank licensee of the Central Bank of Bahrain (reached by declaring that you are a bank). The rule was added in July 2021 and amended in April 2022.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident, internal or external, that compromises customer information or disrupts critical services that affect operations (OM-5.5.57).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (OM-5.5.57).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and customers, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (OM-5.5.58).

Conventional Banks Cyber Security Risk Management Rules, Central Bank of Bahrain Rulebook Volume 1, Module OM, paragraphs OM-5.5.22 to OM-5.5.56 · Read the law's page

• This binds a conventional bank licensee of the Central Bank of Bahrain (reached by declaring that you are a bank). The section was added in July 2021.
• Conduct periodic assessments of cyber threats and of the maturity, coverage and effectiveness of your cyber security controls, and regular technical assessments to identify vulnerabilities in systems, applications and network devices (OM-5.5.22, OM-5.5.23 and OM-5.5.25).
• Implement cyber security incident management processes for timely detection, response and recovery, including a Security Information and Event Management system, and establish a Security Operations Centre (OM-5.5.31 and OM-5.5.35).
• Identify the critical systems and services that must be recovered on a priority basis, and make sure they can recover from a cyber security breach within your defined recovery time objective (OM-5.5.45 and OM-5.5.48).
• Arrange to seek cyber risk insurance cover from a suitable insurer after a risk-based assessment (OM-5.5.53).
• Make sure all employees receive adequate cyber security training on a regular basis, and give role-specific training to the executive board, senior management, cyber security roles and IT staff (OM-5.5.55 and OM-5.5.56).
• Report cyber security incidents to the Central Bank of Bahrain on the clocks stated in the separate incident reporting row (OM-5.5.57 and OM-5.5.58).

Islamic Banks Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 2, Module OM, paragraphs OM-5.5.57 to OM-5.5.59 · Read the law's page

• This binds an Islamic bank licensee of the Central Bank of Bahrain (reached by declaring that you are a bank). The rule was added in July 2021 and amended in April 2022.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident, internal or external, that compromises customer information or disrupts critical services that affect operations (OM-5.5.57).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (OM-5.5.57).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and customers, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (OM-5.5.58).