Introduction Purpose of the Consultation Paper The Commission seeks to regulate and supervise financial services in the Bailiwickof Guernsey, with integrity, proportionality and professional excellence, and in so doing help to uphold the international reputation of the Bailiwick of Guernsey as a finance center.The purpose of this Consultation Paper is to seek feedback from all interested parties and stake holders on the introduction of a set of Cyber Security Rules under section 16 of The Protection of Investors (Bailiwick of Guernsey) Law, 1987; sections 33A and 33B of The Banking Supervision (Bailiwick of Guernsey) Law, 1994; sections 31A and 31B of The Regulation of Fiduciaries, Administration Businesses and Company Directors, etc (Bailiwick of Guernsey) Law, 2000; sections 38A and 38B of The Insurance Business (Bailiwick of Guernsey) Law, 2002 and sections 18, 18AA and 18AB of The Insurance Managers and Insurance Intermediaries (Bailiwick of Guernsey) Law, 2002 (“the Regulatory Laws”).In addition the Commission also welcomes feedback on the “Home Working –Information Security Risks” self-assurance paper published on 7thJuly 2020. This paper provided a non-exhaustive summary of areas for licensees to consider when reviewing their home working arrangements. Please find copies of the above referenced, proposed Cyber Security Guidance Paper and Consolidated Rules, the proposed Cyber Security Rules, 2020 and the Home Working –Information Security Risk paper published on the Commission’s website. The Consultation Paper is a working document and does not prejudge any final decision to be made by the Commission.
The findings of the Commission’s 2019 Cyber Risk Thematic, presented to industry throughout Q4 2019, suggested that Firms throughout the Bailiwick were supportive of the Commission’sintention to issue a set of rules and accompanying guidance that followed 5 core principles: Identify, Protect, Detect, Respond and Recover.
