Proposed Amendments to Cyber Security Requirements

Central Bank of Bahrain  
مَعْرِضُ الْبَحْرَيْن المركزي

OG/06/2024  
9<sup>th</sup> January 2024

**Chief Executive Officer**  
All Banks  
Payment Service Providers  
Crypto-asset Licensees  
Manama  
Kingdom of Bahrain

Dear Sir/ Madam,

## Consultation: Proposed Amendments to Cyber Security Requirements

As part of CBB’s objective to enhance its regulatory framework, the CBB is proposing certain amendments to cyber security requirements in the Operational Risk Management Module (Module OM) of the CBB Rulebook – Volumes 1 and 2, the General Requirements Module (Module GR) of the CBB Rulebook – Volume 5, ancillary service providers and the Crypto-asset Module (Module CRA) of the CBB Rulebook – Volume 6.

The proposed amendments require the specified licensees to subscribe to a cyber threat intelligence service and an external attack surface management (EASM) platform in order to enhance their cyber security posture.

The proposed amendments to Module OM, Module GR and Module CRA will be available on the CBB website ([www.cbb.gov.bh](http://www.cbb.gov.bh)) under the “open consultations” section.

The CBB requests you to provide your comments, including “nil comments” on the proposed amendments in an **editable format** to [consultation@cbb.gov.bh](mailto:consultation@cbb.gov.bh) by 28<sup>th</sup> January 2024.

Yours faithfully,

Rasheed M. Al-Maraj  
Governor

cc: External Audit Firms

---

هاتف +٩٧٣ ١٧٥٤ ٧٠٠٠، +٩٧٣ ١٧٥٤ ٧٠٠٠ فاكس، +٩٧٣ ١٧٥٣ ٧٧٩٩، ص.ب ٢٧، المنامة، مملكة البحرين  
T +973 1754 7500, +973 1754 7555, F +973 1753 7799, P.O. Box 27, Manama, Kingdom of Bahrain, www.cbb.gov.bh