Policy brief & purpose. Our company cyber security policy outlines our guidelines and provisions for preserving the security of our data and technology infrastructure. The more we rely on technology to collect, store and manage information, the more vulnerable we become to severe security breaches. Human errors, hacker attacks and system This policy defines the information security requirements for banks in nine aspects: staff's security awareness, management functions, security strategy, access control, security domain, system security, encryption, end-point security and information life cycle management. Technology Risk The Cyber Security Framework for bank widely covers the follows domains: The detailed requirements for each of the Annexures of Cyber Security Framework are as follows: Cyber Security Framework Cyber Security Policy Cyber Security Strategy Continuous Surveillance Risk / Gap Assessment IT Architecture Reporting Cyber Incidents Network and of cyber attacks. A Critical Infrastructure Perspective On February 12, 2013, the Presi-dent issued Executive Order 13636, "Improving Critical Infrastructure Cybersecurity," which established that "[i]t is the policy of the United States to enhance the security and resilience of the Nation's critical infrastructure and to maintain a Click to Download a PDF version of Cyber Security Journal Volume 1, Issue 1. Policies founded on good cyber security hygiene create another strong line of defense. Generally, company policies should provide guidelines on the safe use of public Wi-Fi (when applicable), prohibit workers from transmitting sensitive information over anything 1.4.6 'Cybersecurity Incident' is a cyber event that: i. jeopardizes the cyber security of an information system or the information the system processes, stores or transmits; or ii. violates the security policies, security procedures or acceptable use policies, iii. whether resulting from malicious activity or not. Downloaded by more than 1,000 bankers. Free Excel spreadsheet to help you track missing and expiring documents for credit and loans, deposits, trusts, and more. Visualize your exception data in interactive charts and graphs. Provided by bank technology vendor, AccuSystems. Download TicklerTrax for free. Vice President and Head of IT Security . Eastern Bank Limited . Guideline on ICT Security For Banks and NBFIs 2015 Bangladesh Bank Page ii Syed Pear Mahmood . Head of Group Function Technology . To establish a standard ICT Security Policy and ICT Security Management approach b) To help the Banks and NBFIs for secured setup of its ICT III FINANCIAL SECTOR'S CYBERSECURITY: REGULATIONS AND SUPERVISION ACRONYMS AND ABBREVIATIONS AICPA American Institute of Certified PublicAccountants APIs Application Programming Interfaces ASIC Australian Securities and Investment Commission BaFin German Federal Financial Supervisory Authority BCBS Basel Committee on Banking Supervision CAPEC Common Attack Pattern Enumeration and Classification c) The licensee's approach to cyber security risk management, definition and oversight the level of exposure to cyber security risk threats; and d) The key elements of cyber security risk defense strategy - objectives, principles of operation and implementation. RM-9.1.10 Licensees must establish a cyber security risk policy, which includes: A successful cyber breach can cause major damage and lead to theft of personal identifiable information, compan