Direct engagement for the financial and public sectors, with no local accreditation restriction.
Last updated — August 22, 2026
Bahrain's framework is carried by the National Cyber Security Centre (NCSC) and the Central Bank of Bahrain (CBB). The financial sector is governed by the CBB Cyber Security Module, integrated into the central bank's prudential regulation. Personal data protection falls under the Personal Data Protection Law (Law 30/2018).
Engagement model
Direct engagement
Languages
Arabic, English, French
The National Cyber Security Centre (NCSC) for the national framework, and the Central Bank of Bahrain (CBB) for the financial sector.
A regulatory module integrated into the CBB's prudential rulebook, imposing cybersecurity requirements on regulated financial institutions.
The Personal Data Protection Law, Law 30/2018.
Yes, with no local accreditation restriction.
The financial sector, given the CBB's regulatory weight, along with the public sector.
Security audits and GRC compliance for the financial sector, complemented by regular penetration testing and continuous monitoring.