Central Bank of Jordan
Information Security Policy
Preserving the confidentiality, integrity, and availability of information is considered a top priority for the Central Bank of Jordan. The Central Bank seeks to provide the necessary security requirements to protect its information assets, in compliance with the applicable laws and regulations in the Hashemite Kingdom of Jordan and in the Central Bank; aiming to provide a secure working environment that contributes to achieving national objectives, the bank's strategy, and sustaining its provided services with the required efficiency.
The Central Bank of Jordan’s approach to information security and cybersecurity is based on international standards and globally recognized best practices, the Information Security and Cybersecurity Department conducts periodic assessments to determine the level of effectiveness of the mechanisms applied to information security and cybersecurity, and to ensure cyber resilience. This enables business continuity, adaptation, recovery, and response to changes and threats, including threats from emerging technologies.
Information security and cybersecurity requirements at the Central Bank are determined based on the following:
1. The strategy and objectives of the Central Bank.
2. Risk assessment for the Bank through identifying threats to information assets, identifying vulnerabilities, determining the likelihood of occurrence, and assessing the potential impact of such occurrence.
3. Legislative, legal, regulatory, and contractual compliance requirements, and the level of prevailing organizational culture.
4. Business objectives and requirements related to the creation, storage, processing, transmission, and destruction of information.
5. The principle of Cost-Benefit Analysis by comparing the cost of implementing controls and allocating resources with the potential scale of damage to the Bank’s operations in the absence of such controls."
The Governor