Proposed Amendments to Cyber Security Requirements

Central Bank of Bahrain
مَعْرِضُ الْبَحْرَيْن المركزي

OG/06/2024
9^th January 2024

Chief Executive Officer
All Banks
Payment Service Providers
Crypto-asset Licensees
Manama
Kingdom of Bahrain

Dear Sir/ Madam,

Consultation: Proposed Amendments to Cyber Security Requirements

As part of CBB’s objective to enhance its regulatory framework, the CBB is proposing certain amendments to cyber security requirements in the Operational Risk Management Module (Module OM) of the CBB Rulebook – Volumes 1 and 2, the General Requirements Module (Module GR) of the CBB Rulebook – Volume 5, ancillary service providers and the Crypto-asset Module (Module CRA) of the CBB Rulebook – Volume 6.

The proposed amendments require the specified licensees to subscribe to a cyber threat intelligence service and an external attack surface management (EASM) platform in order to enhance their cyber security posture.

The proposed amendments to Module OM, Module GR and Module CRA will be available on the CBB website (www.cbb.gov.bh) under the “open consultations” section.

The CBB requests you to provide your comments, including “nil comments” on the proposed amendments in an editable format to consultation@cbb.gov.bh by 28^th January 2024.

Yours faithfully,

Rasheed M. Al-Maraj
Governor

cc: External Audit Firms

---

هاتف +٩٧٣ ١٧٥٤ ٧٠٠٠، +٩٧٣ ١٧٥٤ ٧٠٠٠ فاكس، +٩٧٣ ١٧٥٣ ٧٧٩٩، ص.ب ٢٧، المنامة، مملكة البحرين
T +973 1754 7500, +973 1754 7555, F +973 1753 7799, P.O. Box 27, Manama, Kingdom of Bahrain, www.cbb.gov.bh