Unit of Financial Computer Emergency Response Team (Jo-FinCERT)
Executive Manager: Ibrahim Shafei
The Unit of Financial Computer Emergency Response Team (Jo-FinCERT) is responsible for enhancing the cybersecurity of the banking and financial sectors and increasing their readiness and capability to fortify the defenses against and respond to cyber risks. To that extent, the unit assumes the following tasks:
- Contribution to cybersecurity strategy development for the financial and banking sector, including program implementation, policy monitoring, and submitting reports for internal and external entities.
- Developing and implementing frameworks and guidelines to enhance cybersecurity within the financial and banking sector.
- Contributing to the development and implementation of programs and frameworks to assess the efficiency and effectiveness of cybersecurity controls in financial and banking institutions to determine their maturity level, in coordination with relevant internal and external parties.
- Conducting studies and reports on cybersecurity topics, risks, and updates for financial and banking institutions, and offering recommendations.
- Identifying technical and service needs of the unit, overseeing procurement, operation, and management.
- Coordinating with financial institutions locally, regionally, and internationally to promote cybersecurity innovations and enhance workforce capabilities
- Offering consultative guidance to financial and banking institutions on technical and security design enhancements, serving as a reference resource for potential implementation.
- Managing response operations for cyber incidents impacting the sector.
- Serving as a central point of contact for the financial sector with local, regional, and international entities related to cybersecurity.
- Operating and managing a platform for exchanging and analyzing cyber incident information among financial and banking institutions. Providing expert advisory services to financial and banking institutions on refining technical and security designs, offering actionable recommendations and serving as a knowledge repository for potential enhancements.
- Enhancing awareness and fostering a robust security culture among employees and clients in the financial sector in information security, cybersecurity, and financial fraud.
- Managing the Public Key Infrastructure (PKI) system for the financial and banking sector.
- Providing appropriate security services and promoting joint cybersecurity services for the financial services.
- Classifying information owned by the unit according to information classification, handling, and access control instructions.
- Carryout risks and supervisory controls self-assessment related to the unit’s function in coordination with the Risk management and compliance department per the related instructions and the adopted methodologies to determine the levels and methods of processing and managing risks.
E-mail: Fincert@cbj.gov.jo