Circular regarding the reporting of Information Security Incident No. (1/1/2571) dated 3/3/2015

In the name of Allah, the Most Gracious, the Most Merciful

Central Bank of Jordan
Number: 2571 / 10 / 1
Date: 12 / 5 / 1436 AH
Corresponding to: 3 / 3 / 2015 AD

Circular to Licensed Banks

I refer to the letter from His Excellency the Chairman of the Board of Directors of the Jordanian Banks Association and its attachments, No. (12/494) dated 2 / 12 / 2014, and subsequently to our letter No. (10/2/7043) dated 5 / 6 / 2014 regarding the mechanism for reporting information security incidents. In order to ensure rapid response and to mitigate, address, and manage incidents related to fraud and cyberattacks to which banks are exposed, the attached form and its instructions for use have been approved for implementation as follows:

1. Banks that experience information security incidents are obligated to report such incidents to the Central Bank of Jordan immediately and without delay, using the attached form.
2. The Central Bank of Jordan will send the incident information to the Jordanian Banks Association after redacting the bank's name and contact information.
3. The Association will, in turn, disseminate the incident to the relevant specialists within the licensed banks and provide a copy to the specialized committee responsible for such matters within the Association, to discuss these incidents promptly and as needed.
4. The specialized committee will, through the Association, issue the necessary recommendations to the banks.

Emphasizing the necessity of continuing to operate in accordance with Clause (b) of Article Eleven of our Instructions No. (8/2001) dated 26 / 7 / 2001 regarding the notification of the Central Bank of Jordan of any internal or external breaches affecting the bank's information systems upon their occurrence, along with details of those breaches and their impacts, and the measures taken to address them.

Please accept the highest assurances of respect and appreciation,

Governor
Dr. Ziad Frieze

• Attachments

Form 1/10/1
P.O. Box 37, Amman 11118, Jordan • Phone: 4630301 • Fax: 4638889, 4639730, 4639731 • E-mail: info@cbj.gov.jo • Website: www.cbj.gov.jo