Is a securities firm, in Bahrain

Investment Business Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 4, Module RM, paragraphs RM-9.1.58 to RM-9.1.60 · Read the law's page

• This binds an investment business licensee of the Central Bank of Bahrain (reached by declaring that you are a securities firm). The rule was added in January 2022 and amended in April 2022.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident, internal or external, that compromises customer information or disrupts critical services that affect operations (RM-9.1.58).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (RM-9.1.58).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and customers, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (RM-9.1.59).