PanamaSuperintendency of Banks Agreement 003-2012, Incident Handling and Notification by the Information Security Unit
Acuerdo No. 003-2012 (Superintendencia de Bancos de Panamá) Gestión del Riesgo de la Tecnología de la Información, art. 11, points 10 and 11
In force since .
A vulnerability and incident reporting rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Reporting
As of .
What it requires
- This binds official banks, general-licence banks and international-licence banks for which the Superintendencia de Bancos de Panamá is the home supervisor (reached by declaring that you are a bank) (Article 1).
- Have the information security unit monitor and handle information security incidents (Article 11).
- Notify the Superintendencia de Bancos, using the form it has established, when the bank suffers attacks (Article 11).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Enforcement body
The Superintendent of Banks, who sanctions a breach of the Acuerdo under Title IV of the Banking Law.
What this law does
Article 1 applies the Acuerdo to official banks, general-licence banks and international-licence banks for which the Superintendencia is the home supervisor. Article 11 gives the information security unit of a bank the function of monitoring and handling information security incidents. Article 11 also requires the information security unit to notify the Superintendencia, using the form it has established, when the bank suffers attacks. Article 16 provides that the Acuerdo applies from .
When LexLint raises it
When your app profile says your app is a bank.