Incident Management

Crisis Management

In order to confront and confront cyber incidents that the financial and banking sector may be exposed to, and to work to contain them through effective communication between the employees of the Response Unit team and the financial and banking sector institutions, the actual response role comes from the Operations and Monitoring Department, which is based on collecting information and evidence related to the incident and alerting all the sector institutions concerned with the incident. All information is collected and the relevant reports are prepared regarding the incident and sent to the relevant authorities to take the necessary measures to analyze and document it.

Accident effects analysis

Cyber incidents that the sector may be exposed to are analyzed using specialized systems through which the incident details are examined and reviewed, its impact on the targeted organization is determined, and then detailed reports are created that include all information related to the incident.

Blocking and Takedown

All technical security information of financial and banking sector institutions is collected and studied, and is compared via the specialized cyber systems of the Response Unit with the data and indicators of cyber incidents on an ongoing basis. In the event of any relevant or similar data to the data and indicators of any institution in the sector, the concerned parties are contacted and verified. If it is similar to the original, and if the validity of the relationship is proven, this data is blocked and removed.