Other Research Assessment

Country
Pakistan

Source
State Bank of Pakistan

Title
Prevention against Cyber Attacks (under their Banking Policy & Regulations Department section )

About
Broad guidelines for the board and senior execs of all banks / microbanks and Financial Institutions (from 2016)

Key findings
Include cyber security controls as part of their IT risk management policy Board to meet on bi-annual basis evaluate the cyber security action plan with regards to emerging threats. Senior / Exec Management ensure organisational plan of action exists and regularly reviewed. Risk ownership & Management responsibility Periodic evaluation and monitoring of cyber security controls Regular independent assessment & tests Industry collaboration and contingency plan

Website
http://www.sbp.org.pk/bprd/2016/C7.htm