Palestine Monetary Authority Circular No. 21 of 2024 on IT Operational Events and Information Security

PALESTINE MONETARY AUTHORITY

Circular No. (21 / 2024)
To all exchange companies/offices operating in Palestine Date: Sunday, October 13, 2024

Subject: IT Operational Events / Information Security

In order to mitigate operational risks that the exchange sector may be exposed to, and to avoid negatively affecting the integrity and continuity of its operations in light of the increasing volume of cyberattacks, and to mitigate expected risks, and based on best standards and practices and our relevant instructions, all exchange companies/offices are requested to comply with the following:

1. Notify the Palestine Monetary Authority immediately, without delay, of technical operational events and cyberattacks that they or any third party contracted with them may be exposed to, which affect or are likely to affect the operation of their systems and services, regardless of the duration of interruption or irregularity of service, including:
   a. Cyberattacks and any breach of information security, whether successful or failed. b. Failure, stoppage, or disruption of system operations, including surveillance camera systems.
   c. Unauthorized access to systems.
   d. Data leaks.

2. Immediate reporting shall be made via email (mchangers@pma.ps) or phone/mobile, and must be reinforced in writing with detailed information within a maximum of two days from the date of the event.

Supervision Group
Palestine Monetary Authority

--- www.pma.ps
Ramallah and Al-Bireh Governorate - Palestine P.O. Box 452 | Tel: +970 2 2415251 | Fax: +970 2 2415310 | info@pma.ps | Postal code: P6160675

---