DESCRIPTION
The Insurance Commission of The Bahamas now expects regulated firms to run a documented cyber risk programme and certify it every year. Its Cybersecurity Risk Management Guidelines cover a Board-approved framework, annual penetration testing, incident-response exercises, third-party oversight and an annual certification signed by the CEO. We map what applies to you, close the gaps and prepare your certification.
BENEFITS
Gap assessment against every section of the Guidelines.
Risk register and cyber risk management framework documents.
Policy set aligned to ISO 27001 and NIST CSF 2.0.
Incident-response plan and tabletop exercise.
Penetration test of internet-facing systems (optional).
Draft self-assessment and annual certification, ready for CEO sign-off.
The Commission may accept a virtual CISO equivalent, which our vCISO service provides.
HOW IT RUNS
Readiness Assessment against the Guidelines (weeks 1–3).
Framework, policies and remediation plan (weeks 3–7).
Tabletop exercise and testing (weeks 7–9).
Certification pack for CEO sign-off (weeks 9–10).
