Is a crypto-asset provider, in Bahrain

Crypto-Asset Cyber Security Incident Reporting Rules, Central Bank of Bahrain Rulebook Volume 6, Module CRA, paragraphs CRA-5.8.33 to CRA-5.8.35 · Read the law's page

• This binds a crypto-asset licensee of the Central Bank of Bahrain (reached by declaring that you are a crypto-asset provider). The rule was added in April 2023.
• Contact the Central Bank of Bahrain by telephone immediately, within one hour, on detecting a cyber security incident or an unplanned outage, internal or external, that compromises client information or disrupts critical services that affect operations (CRA-5.8.33).
• Submit Section A of the Cyber Security Incident Report to the Central Bank of Bahrain's cyber incident reporting email within two hours (CRA-5.8.33).
• Submit Section B of the Cyber Security Incident Report within 10 calendar days of the incident, with the full root cause analysis, the impact on business operations and clients, and the measures taken to stop the attack and prevent a recurrence, and send a weekly progress update until the incident is fully resolved (CRA-5.8.34).