Duty LXD-7840
Is a securities firm, in Colombia
Superintendencia Financiera de Colombia, Circular Externa 033 de 2020 (External Circular 33 of 2020), taxonomy, protocol and mailbox for reporting cybersecurity incidents and a format for security metricssince 3 lines
Circular Externa 033 de 2020 (Superintendencia Financiera de Colombia) · Read the law's page
- If you are an entity subject to the Superintendencia Financiera de Colombia's inspection and supervision, or a PILA information operator, keep reporting security incidents and cybersecurity incidents to riesgooperativo@superfinanciera.gov.co (Circular Externa 033 de 2020, fifth instruction).
- Label each incident report with the Traffic Light Protocol (TLP) and describe the incident using the single taxonomy of cyber incidents, the TUIC, that the circular defines (first and fifth instructions).
- Transmit your information security and cybersecurity metrics on Formato 408 (Proforma F.000-164) (second instruction).