Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct BMA-21: Security Testing Programme

Security Testing Programme. RLEs must assess their risk and determine a suitable security testing programme (for example vulnerability assessment and penetration testing) commensurate with that risk (para 56).

Other controls in BMA Code Section VI: Detect and Protect Controls

BMA-10 Threat Intelligence and Vulnerability Alerting
BMA-11 Information Technology Incident Management
BMA-14 IT Security Incident Management and Response Team
BMA-15 Notification of Cyber Reporting Events to the Authority
BMA-16 Access Management and Segregation of Duties
BMA-17 Staff Cyber Risk Awareness Training
BMA-18 Data Classification and Security
BMA-19 Data Protection, Governance and Loss Prevention

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct controls