Fiji
2 regulators · 6 laws & regulations · 1 obligation · 3 enforcement actions
| Obligation | Timing | Regulator | Arises from | Source | Detail |
|---|---|---|---|---|---|
| Banking | |||||
| Notify the Reserve Bank of material cybersecurity incidents | Deadline Within 24 hours of becoming aware (s.17.2); quarterly report in Form QCR (Appendix 2) | RBF | RBF Prudential Supervision Policy Statement No. 2: Minimum Requirements for the Management of Cybersecurity Risk by Supervised Entities | official | |
Section 17.2 of Prudential Supervision Policy Statement No. 2 requires a supervised entity to notify the Reserve Bank within 24 hours of becoming aware of a cybersecurity incident that materially affects, or could materially affect, the institution or its customers and stakeholders. Section 17.1 requires incidents to be reported in the format in Appendix 2, a Quarterly Report on Cybersecurity Risk Incidents (Form QCR). Footnote 4 says this is separate from operational risk incident reporting under BSPS No. 16, which continues. |
|||||
| No obligations match these filters. | |||||