2016-01-25 | 02/17/150/0095/001The Bank Supervision Department of the Central Bank of Sri Lanka requires all licensed commercial and specialised banks to submit Cyber Security Event reports with immediate effect. Institutions must file initial incident notifications (CSE-I) within one working day of detection and quarterly summaries (CSE-II) within fifteen days after each quarter ends. Banks must also provide retrospective data for all incidents detected since January 2015, submitting these reports electronically or via confidential cover to the Director of Bank Supervision.