Warba Bank will achieve this through:
- 1. Implementing appropriate controls to protect the Confidentiality, Integrity and Availability of all information assets and all supporting systems, applications, and business processes .
- 2. Designing, operating, managing, and evaluating its Information Security Management System (ISMS) to demonstrate its effectiveness
- 3. Implementing Cybersecurity controls Framework that meets the principles of Governance, Risk Management and Compliance, Collaboration and Continual improvement and that is aligned with the Central Bank of Kuwait Cybersecurity Framework.
- 4. Restricting and monitoring physical and logical access to Information and Information Processing facilities to authorized users.
- 5. Embedding continuous improvement and cyber security awareness culture amongst the bank staff and stakeholders, interested parties, vendors, outsource service providers and third parties.
- 6. Ensuring compliance with all legal and regulatory requirements that are relevant to information security
- 7. Establish, implement, and monitor an Information Security risk assessment and treatment methodology and process
- 8. Evaluating and monitoring ISMS performance, investigating and learning form incidents and proactively responding through periodic management reviews for continually improving the Information Security Management System, its implementation, and its performance
- 9. Establish and implement an effective information security incident management process
- 10. Establish and implement Senior Management and concerned committees reporting process highlighting the state of Information Security
Top Management mandates all Warba Bank employees and stakeholders to abide by the Information Security Policy
The line management and staff should ensure compliance with this Information Security Policy, report any non-compliance cases, and create a culture of continuous improvement with respect to the bank’s Information Security
