Palestine Monetary Authority Circular No. 21 of 2024 on Operational Events Related to Information Technology – Information Security

PALESTINE MONETARY AUTHORITY

Circular No. (21 / 2024)
To all exchange companies/offices operating in Palestine Date: Sunday, October 13, 2024

Subject: Operational Events Related to Information Technology/Information Security

In order to mitigate operational risks that the exchange sector may be exposed to, and to avoid negatively affecting the integrity and continuity of its operations in light of the increasing volume of cyberattacks, and to mitigate expected risks, and based on best standards and practices and our relevant instructions, all exchange companies/offices are requested to comply with the following:

1. Notify the Palestine Monetary Authority immediately and without delay of operational technical events and cyberattacks that they or any third party contracted with them may be exposed to, which affect or are likely to affect the operation of their systems and services, regardless of the period of interruption or irregularity of service, including:
   a. Cyberattacks and any breach of information security, whether successful or failed. b. Failure, stoppage, or disruption of system operations, including surveillance camera systems.
   c. Unauthorized access to systems.
   d. Data breaches.

2. Immediate reporting shall be made via email (mchangers@pma.ps) or phone/mobile, and must be reinforced in writing with details within a maximum of two days from the date of the event.

Supervision Group
Palestine Monetary Authority

--- www.pma.ps
Ramallah and Al-Bireh Governorate - Palestine P.O. Box 452 | Tel: +970 2 2415251 | Fax: +970 2 2415310 | info@pma.ps | Postal code: P6160675