NCU Bermuda

Legislation Compliance

The Cybersecurity Act 2024 establishes your mandatory obligations for national cyber resilience. The NCU drives national Governance through this framework. Compliance is not optional; it is foundational to our collective security.

How will your organization meet the legislative standards?

01

Mandated Reporting

The Act requires CNII entities to report cyber incidents to the NCU within the prescribed timeframe. Non-compliance results in regulatory action.
02

Risk Management Frameworks

You must implement robust risk management protocols to protect your critical information infrastructure (CII). This includes maintaining adequate security controls.
03

Governance Structure

Your organizational Governance must clearly define roles and responsibilities for managing cyber risk at the executive level. The board retains ultimate accountability for security posture.
04

Vulnerability Disclosure

Adhere to NCU protocols for responsible vulnerability disclosure. Protect the confidentiality and integrity of national systems.