Cyber Security Risk Management

# Central Bank of Bahrain

## Executive Director - Banking Supervision

---

**EDBS/KH/C/89/2019**  
**22nd December 2019**

---

**Chief Executive Officer**  
All Banks  
Manama  
Kingdom of Bahrain

---

Dear Sir,

## Consultation: Cyber Security Risk Management

As you are aware, the CBB issued a draft consultation paper proposing amendments to various sections of the Operational Risk Management Module (Module OM) on 26th March 2019. After further deliberations and review of the Industry feedback, the CBB is issuing a second consultation proposing further enhancements to its directive on Cyber Security Risk Management that is included in Section OM-6.6 of the CBB Rulebook, Volumes 1 and 2. The other sections of Module OM are not part of this consultation and they will be issued as final rules in due course.

The CBB requests all banks, audit firms and interested parties to provide their comments, including ‘nil comments’ on these proposed changes. Responses must be sent electronically, in an editable format, to **consultation@cbb.gov.bh** by 22nd January 2020.

The proposed revised Section for Volumes 1 and 2 shall be available on the CBB website (**www.cbb.gov.bh**) under the “open consultations” section.

---

Yours faithfully

**Khalid Hamad**

cc: Bahrain Bankers Association  
External Audit Firms

---

**مصرف البحرين المركزي**  
Central Bank of Bahrain  

**المنطقة التشغيلية للرقابة المصرفية**  
Executive Director - Banking Supervision

---

**ص.ب: ٧٧، المنامة - مملكة البحرين**  
**هاتف: ٠٠٤٥٧١١٩٢٣ - فاكس: ٠٥٧٢١٦٩٣٠**  
P.O. Box: 27, Manama - Kingdom of Bahrain  
Tel: (+973) 17547400 - Fax: (+973) 17532605  
website: www.cbb.gov.bh  
E-mail: khalid.hamad@cbb.gov.bh