🇧🇭 Bahrain Financial InstitutionsCentral Bank of Bahrain · Cybersecurity Framework

CBB Compliance,
Automated

Built specifically for the CBB's Cybersecurity Framework. Continuous monitoring across 29 controls — mapped to your AWS, Okta, and Palo Alto integrations. Built in Bahrain.

Request a Proposal →Talk to sales →
CBB framework mapped
29 controls automated
Built in Bahrain
Who must comply

All CBB Volume 4/5/6 licensees

If the CBB has issued your license, the CBB Cybersecurity Framework is mandatory.

Conventional banks and Islamic banks
Insurance companies and takaful operators
Fintech companies and payment service providers
Financing companies and microfinance institutions
Money changers and exchange houses
Trust service providers
Crypto-asset service providers
Capital market firms
Framework coverage

29 CBB controls across 5 functions

Aligned with the NIST CSF — with 5 additional CBB-specific specialised controls.

🔍
Identify
6 controls
✓
Asset management
✓
Governance structure
✓
Risk assessment
✓
Supply chain risk
🛡️
Protect
7 controls
✓
IAM & MFA via Okta
✓
Data security & encryption
✓
Firewall via Palo Alto/Meraki
✓
Secure development
🔎
Detect
3 controls
✓
Audit logging (CloudTrail/AWS)
✓
Continuous monitoring
✓
Threat intelligence
⚡
Respond
5 controls
✓
Incident response plan
✓
CBB CERT notification (2h)
✓
Forensics capability
✓
Crisis communications
🔄
Recover
3 controls
✓
Business continuity (BCP)
✓
Disaster recovery (DRP)
✓
Recovery testing
⭐
CBB-Specific
5 controls
✓
Cloud outsourcing (OM-2)
✓
PAM
✓
CBB CERT registration
✓
Cyber insurance
✓
Crypto-asset security
How it works

CBB audit-ready in 3 steps

01
🔌
Connect your stack
Integrate AWS, Okta, and Palo Alto in under 30 minutes. Read-only access — NetGuard only observes, never modifies.
02
⚡
Run CBB CSF scan
NetGuard evaluates all 29 CBB controls automatically — including OM-2 cloud outsourcing and the 2-hour incident notification requirement.
03
📄
Download CBB audit report
Export your evidence package with every CBB control mapped to timestamped proof from your integrations.
CBB-specific requirements

The CBB requirements that catch institutions off guard

⏱️
2-Hour Incident Notification
CBB requires notification within 2 hours of a material cyber incident. NetGuard's drift detection alerts you the moment a control fails — before your auditor or the CBB finds it first.
☁️
Cloud Outsourcing (OM-2)
CBB OM-2 requires approval for material cloud outsourcing. NetGuard documents your cloud footprint automatically so you're always ready for CBB review.
Comparison

Manual CBB compliance vs NetGuard

ManualNetGuard
Time to audit-ready3–6 monthsDays
Continuous monitoring❌✅
2h incident alertingManualAutomated
OM-2 cloud documentationManualAutomated
Evidence collectionManual screenshotsAutomated
Monthly cost$5,000–15,000$599
Automate your CBB compliance today
Growth plan · $599/month · All 29 CBB controls · Built in Bahrain
Request a Proposal →Talk to sales
FAQ

Common questions

Which CBB rulebook volumes does NetGuard cover?▾
Volume 4 (OM module for conventional banks), Volume 5 (Specialised Licensees), and Volume 6 (Capital Markets).
Does this replace a CBB compliance audit?▾
No. NetGuard automates evidence collection and continuous monitoring. Your CBB audit is conducted by external auditors approved by the CBB.
Is NetGuard based in Bahrain?▾
Yes. Built and operated from Bahrain — we understand the CBB's requirements firsthand.
How quickly can I be CBB audit-ready?▾
Connect integrations in under 30 minutes, get a full CBB-mapped compliance report the same day.

Ready to automate your CBB compliance?

Built in Bahrain. Connect integrations in 30 minutes. Full CBB audit package same day.

Request a Proposal →
14-day free trial · No credit card · Cancel anytime
Also supports SAMA CSF for Saudi Arabian financial operations.