GambiaCentral Bank of The Gambia Cybersecurity Guidelines for Financial Institutions: Reporting of Cyber Incidents
In force.
A vulnerability and incident reporting rule binding private bodies.
- Enforcement body
- Central Bank of The Gambia
- Obligation class
- Reporting, Security
As of .
What it requires
- This reaches you where you are a deposit-taking financial institution, such as a commercial bank, savings and loans company, mutual savings company or credit union, authorised under the Banking Act 2009 or the Non-Bank Financial Institutions Act 2016 (secs. 1.3 and 1.4) (reached by declaring that you are a bank).
- Report all cyber incidents, whether successful or not, to the Central Bank of The Gambia immediately after the incident is identified, using the cyber incident report template in Appendix II, and provide additional information afterwards where necessary and applicable (sec. 5.2(4)).
- Have your Board receive quarterly reports and updates concerning cyber and information security incidents, and have senior management receive quarterly reports on the state of the cyber and information security programme (secs. 3.1 and 5.2).
- Develop adequate management processes and plans for IT incident detection, notification and escalation; your incident response policy should stipulate how crisis information is communicated and shared with stakeholders including the Central Bank of The Gambia, law enforcement agencies and the public (sec. 4.1.3).
These lines are LexLint's reading of the law's text, as of .
What this law does
Section 5.2 requires financial institutions to report all cyber-incidents, whether successful or not, to the Central Bank of The Gambia immediately after the incident was identified, using the reporting format in Appendix II. Section 3.1 requires the Board of a financial institution to receive quarterly reports and updates concerning cyber and information security incidents.
Section 4.1.3 requires the incident response policy to set out how crisis information is communicated and shared with stakeholders including the Central Bank of The Gambia, law enforcement agencies and the public.
When LexLint raises it
When your app profile says your app is a bank.