Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct BMA-3: Operational Cyber Risk Management Programme

Operational Cyber Risk Management Programme. The objectives of the cyber risk policy must be delivered by an operational cyber risk management programme that defines, documents and communicates policies, processes and procedures (paras 15-16).

Other controls in BMA Code Section V: Identification of Assets and Risks

BMA-12 Board and Senior Management Oversight
BMA-13 Asset Inventory
BMA-27 Cyber Insurance
BMA-4 Chief Information Security Officer
BMA-5 Three Lines of Defence
BMA-6 Risk Assessment Process
BMA-7 Information Technology Audit Plan
BMA-8 Third-Party, Outsourcing and Cloud Risk

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct controls