Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct BMA-19: Data Protection, Governance and Loss Prevention

Data Protection, Governance and Loss Prevention. RLEs must have Data Loss Prevention controls for primary business data, assess compliance with applicable data protection/privacy laws, and document data governance controls (paras 49-51).

Other controls in BMA Code Section VI: Detect and Protect Controls

BMA-10 Threat Intelligence and Vulnerability Alerting
BMA-11 Information Technology Incident Management
BMA-14 IT Security Incident Management and Response Team
BMA-15 Notification of Cyber Reporting Events to the Authority
BMA-16 Access Management and Segregation of Duties
BMA-17 Staff Cyber Risk Awareness Training
BMA-18 Data Classification and Security
BMA-20 Malicious Code Controls

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct controls