ࡱ> ih ZO\pMicrosoft Office User Ba= ThisWorkbook=Y8'8X@"1Calibri1Calibri1Calibri1Calibri1Calibri1hCalibri1Calibri1Calibri1Calibri1Calibri1Calibri1Calibri1Calibri1 Calibri1Calibri1Tahoma1 Calibri1Calibri1Calibri1h8Cambria1,8Calibri18Calibri18Calibri1Calibri1Calibri1<Calibri1>Calibri1?Calibri14Calibri14Calibri1 Calibri1 Calibri1Calibri1Calibri1 Calibri"$"#,##0_);\("$"#,##0\)!"$"#,##0_);[Red]\("$"#,##0\)""$"#,##0.00_);\("$"#,##0.00\)'""$"#,##0.00_);[Red]\("$"#,##0.00\)7*2_("$"* #,##0_);_("$"* \(#,##0\);_("$"* "-"_);_(@_).))_(* #,##0_);_(* \(#,##0\);_(* "-"_);_(@_)?,:_("$"* #,##0.00_);_("$"* \(#,##0.00\);_("$"* "-"??_);_(@_)6+1_(* #,##0.00_);_(* \(#,##0.00\);_(* "-"??_);_(@_)dd\-mmm\-yyyy\ hh:mm                                                     #  #  #  #  #  #        ff + ) , * !    P  P        `           " a>         @ @   @ @   @ @   @ @   @ @   @ @     @ @   @ @   @ @  @ @   @ @   @ @   @ @   @ @     @ @            @ @   @ @   @ @   @ @   @ @   @ @   @ @   @ @   @ @  (@ @   @ @   @ @  (@ @     @ @  (@ @  (@ @  !@ @   #       ||mJw}-} 00\);_(*}-} 00\);_(*}-} 00\);_(*}-} 00\);_(*}-} 00\);_(*}-} 00\);_(*}-} 00\);_(*}-} 00\);_(*}-} 00\);_(*}-}  00\);_(*}-}  00\);_(*}-}  00\);_(*}-}  00\);_(*}-}  00\);_(*}-} 00\);_(*}-} 00\);_(*}-}> 00\);_(*}A}? 00\);_(*;_(@_) }-}@ 00\);_(*}A}A 00\);_(*;_(@_) }A}B 00\);_(*;_(@_) }A}C 00\);_(*;_(@_) }A}D 00\);_(*;_(@_) }A}E 00\);_(*;_(@_) }A}F 00\);_(*;_(@_) }A}G 00\);_(*;_(@_) }A}H 00\);_(*;_(@_) }A}I 00\);_(*;_(@_) }A}J 00\);_(*;_(@_) }A}K 00\);_(*;_(@_) }A}L 00\);_(*;_(@_) }A}M 00\);_(*;_(@_) }A}N 00\);_(*;_(@_) }A}O 00\);_(*;_(@_) }A}P 00\);_(*;_(@_) }-}Q_(*}A}R _(*;_(@_) }A}S _(*;_(@_) }A}T _(*;_(@_) }A}U _(*;_(@_) }A}V _(*;_(@_) }A}W _(*;_(@_) }A}X _(*;_(@_) }A}Y _(*;_(@_) }A}Z _(*;_(@_) }A}[ _(*;_(@_) }A}\ _(*;_(@_) }A}] _(*;_(@_) }A}^ _(*;_(@_) }A}_ _(*;_(@_) }A}` _(*;_(@_) }A}a _(*;_(@_) }A}b _(*;_(@_) }A}c _(*;_(@_) }A}d _(*;_(@_) }A}e _(*;_(@_) }A}f _(*;_(@_) }A}g _(*;_(@_) }A}h _(*;_(@_) }A}i _(*;_(@_) }A}j _(*;_(@_) }A}k _(*;_(@_) }-}l_(*}-}+ _(*}-}, _(*}-}- _(*}-}. _(*}-}: _(*}-}; _(*}A}1 _(*;_(@_) }A}2 _(*?;_(@_) }A}3 _(*23;_(@_) }-}4 _(*}A}0 a_(*;_(@_) }A}( _(*;_(@_) }A}7 W_(*;_(@_) }}5 ??v_(*̙;_(@_)    }}9 ???_(*;_(@_) ??? ??? ??? ???}}) }_(*;_(@_)    }A}6 }_(*;_(@_) }}* _(*;_(@_) ??? ??? ??? ???}-}= _(*}}8 _(*;_(@_)    }-}/ _(*}U}< _(*;_(@_)  }A}" _(*;_(@_) }A} _(*ef;_(@_) }A} _(*L;_(@_) }A} _(*23;_(@_) }A}# _(*;_(@_) }A} _(*ef;_(@_) }A} _(*L;_(@_) }A} _(*23;_(@_) }A}$ _(*;_(@_) }A} _(*ef;_(@_) }A} _(*L;_(@_) }A} _(*23;_(@_) }A}% _(*;_(@_) }A} _(*ef;_(@_) }A} _(*L;_(@_) }A} _(*23;_(@_) }A}& _(*;_(@_) }A} _(*ef;_(@_) }A} _(*L;_(@_) }A}  _(*23;_(@_) }A}' _(* ;_(@_) }A} _(*ef ;_(@_) }A} _(*L ;_(@_) }A}! _(*23 ;_(@_)  20% - Accent1M 20% - Accent1 ef % 20% - Accent2M" 20% - Accent2 ef % 20% - Accent3M& 20% - Accent3 ef % 20% - Accent4M* 20% - Accent4 ef % 20% - Accent5M. 20% - Accent5 ef % 20% - Accent6M2 20% - Accent6  ef % 40% - Accent1M 40% - Accent1 L % 40% - Accent2M# 40% - Accent2 L渷 % 40% - Accent3M' 40% - Accent3 L % 40% - Accent4M+ 40% - Accent4 L % 40% - Accent5M/ 40% - Accent5 L % 40% - Accent6M3 40% - Accent6  Lմ % 60% - Accent1M 60% - Accent1 23 % 60% - Accent2M$ 60% - Accent2 23ږ % 60% - Accent3M( 60% - Accent3 23כ % 60% - Accent4M, 60% - Accent4 23 % 60% - Accent5M0 60% - Accent5 23 %! 60% - Accent6M4 60% - Accent6  23 % "Accent1AAccent1 O % #Accent2A!Accent2 PM % $Accent3A%Accent3 Y % %Accent4A)Accent4 d % &Accent5A-Accent5 K % 'Accent6A1Accent6  F %(Bad9Bad  %) Calculation Calculation  }% * Check Cell Check Cell  %????????? ???+ Comma,( Comma [0]-&Currency.. Currency [0]/Explanatory TextG5Explanatory Text % 0Good;Good  a%1 Heading 1G Heading 1 I}%O2 Heading 2G Heading 2 I}%?3 Heading 3G Heading 3 I}%234 Heading 49 Heading 4 I}% 5InputuInput ̙ ??v% 6 Linked CellK Linked Cell }% 7NeutralANeutral  W%3Normal % 8Noteb Note   9OutputwOutput  ???%????????? ???:&Per cent ;Title1Title I}% <TotalMTotal %OO= Warning Text? Warning Text %XTableStyleMedium2PivotStyleLight16`lIncident Report1Sheet38fNf8@__bM Mcv:7Qp|ntM Mcv:7QpPNG  IHDRe}gAMA aPLTE!!)!)1!119)9!))1!11=9J9B1BNZBLJRNZBRZkVcT`cmqyhs~{uʄʐΒԜеޢԭ֭֭ޢ޵ֵ۽ֵ֥֭εֽ!)1)991ZBBRJZBwsk{c{c{ބތޔޔބքޜ֌֌ތޭ޽p?h"IDATx흉{Fv9$$@()Unvd7ݣBm+*b+7N$6u<$$$6d>q0x?yo3=KNr:鏌 @'u#ˎi[ӑR+賴rlvgݞZ-@!ly-w:ڠB 隻|n!-7?,MCsB 7Gߙ8H\Zn"v-SfQx -j2 AիŹ}erL &:`5Qz28uq6fx ]+mp+ 謠(0gڎbGinC n"a/vIO^Gi/[- $Kr}3O]U:y ]__^X,d r:H{/-6߻Zq]ؙ)ъíu|BãϏ?7}s)ݑ94co]i6vۍ[ӼBz;+a2;_>kAl֣/ y/q~&; !itwu~TE%IrG[5_.AG#$b᭝{_-&ZILHV$V=RPc.\QH!h^iʜtYzz?] !!mɃTk[&[Gsu<!T-8mm7O%Fu/asyV֟0E|bQۼf-O m٦+o=h6IrSLQ( l*TVNp!ڀ[1^ C1djQKEY,a4oMTE(68 ĤogQkHzrHdCdAc674At"A@JMSkzr%D@4jR5x yo +vX!OJ DZ@j["+Sb SAc$J OMC8ڠG[P"=;4d Q*T25[Fg!pW5ႫɊM[ uwDjtĔQڄTwt2f9af6(Cӆc1Rq@xIDo^ PpQ.SWYZ&J!$p'Oa1 .9_J!_XT`G&1Rr-Jf8)l9'afAzY1&+ Y ,6T{woWe E{iߠ):BRu(91SHI-h$~ŘZRBgB?8;)eiZ4H TďVc鮀{ j(y`-*Twv|Np燝;ktﱖUP[7!Gl<2J:bʗccLZAT=hhFAv:}&ݜT]K/EvryS1aF0FR|Vu0R DiWвT nR4gκ]R[  Fީ?*vw_.!(w9䓧A%ò7߻B tx3UP"BZU8*&q`Kd]Z&+s,Oj\w-U1ʝTF +(bh`>כe-HQk}o  7+ UK04SAc})dkԅykN}M؀ƜrSj[g+wZ_$wԢYu s1I}xˋ$04fHN*z [4[A*t_YoM*W{u|4{쐞}s&hwE!j\WGJh♷3G#yz$:eNPLGK4JFcGt{K,]y⍈6elrݑCy\D F)UY:is;rHR4T)jX61j/VAN#HLd1cI!bTA}`s֙@ᝓ?R߶]Нg1R#Qwg)N:j,q!6+GS+y(/])aD't@ʢ(5j&f_kHsjnYƓ'C\bQw4E{8?x: HMM(kx@Pѕ#?"n$cOM3ua*A2Dq(YM23^H i*EKITlEgwVz1," @/dkTs9d +`EC8HHvukVHGjGB:GJZL )5@jocPQLJOu]\%}=P+RYdtxm=E]ڨnvH!EEh"+Χa~5O&DáhDHųQ:+{&@"cIm(7bxyx64mM0i@!/\JHvR1 {v_?EL!bf֙`$JʹLL&YRNT`1zHfu#b°9&Doy1Ig"P,UzuHAFT'[1(VM())B"L&FYs-Րrf_jTAyszH֦H܄(iP!/h`ߣO7Īx*t*K7v bw-C G#$2οhm~ryNn6n=! q"9G#a:RU|u!ֿ4w:\ r-{fG)J@/w5}|vϏM&J`QEUw[2+ 𕳞G#tA]:ڛ \\PIgh"x 6xuleWBaeP?v("UP7h̠+6^cF48H+2@Z۠ۇ-o+?qltVo.v<ĖբB@O2"wu)Lm4.Ja*啑1@ ~f&WFb5 5 gIy!Gw:/ 7tJϤDj g^s9VH;֕m%m*H\]Y/hs̐BjBѝR3mBLhs bLk[zm)HωqGH uIR'9HNt_'IENDB`S AA@A@  j Instructions: Section A.!Cayman Islands Monetary AuthorityCyber Incident Report Position HeldLicence/Registration Number3. Unless otherwise advised, weekly updates are required by the Authority until such time as the Authority is satisfied that the incident has been satisfactorily resolved.!Date and Time Incident DiscoveredWho discovered the incident?Detected by controls in placeClientOther6[if "Other" selected, provide additional details here]  5 [insert text] Sub-contractorsClientsLaw Enforcement Regulators"Outsourcing partners (third party)&Who has been impacted by the incident?Type of Threat/IncidentAffected Critical SystemQIncident occurred on system or network that could put the critical system at risk*Incident occurred on a non-critical system7Licence and/or Registration Type (check all that apply)! Licences/Registrations AffectedVirus/Worm/TrojanUnauthorised Access of Systems%Misuse of Systems/Inappropriate Usage1Unauthorised Access to Website/Website Defacement0Has the Licensee invoked its cybersecurity plan?YesNo[Select from drop-down list]Analysis3Has the root cause of the incident been determined? Remediation1Has an incident management team been established?6Has the Licensee determined a solution to the problem?4[if "Yes" selected, provide additional details here]  3 2Name of Authorised staff member filing This Report9Is this filing related to a previously reported incident?M[if "Yes" selected, provide additional Reference Number of original incident]  L AProvide details of actions taken as at the filing of this report.3Does this incident span across other jurisdictions?&How has this incident been classified?Type (check all that apply) Resulting impact of incident4Contact Details (telephone number and email address)Technical detailsLicensee/Registrant NameFiling Particulars AssessmentCase%Date and Time of notification to CIMAIs it evident whether the incident has resulted in the Licensee's breach of any relevant laws and/or regulations of jurisdictions in which it operates?"Detail proposed remediation steps.5Does the Licensee have a cybersecurity plan in place?3Add to dropdown: Ransomware Notice, Public Exposure:Add Major system outage, Financial Loss, Denial of Service^[if "Yes" selected, provide additional details of composition and roles/responsibilities here]  ] Ransomware, Exposure of PII, Loss of Confidential Material, Loss of Trade Secret information, Financial Loss, Internal Fraud, Denial of Service Attack RansomwareExposure of PIILoss of Confidential Material Loss of Trade Secret InformationFinancial LossInternal FraudDenial of Service AttackRansomware NoticePublic ExposureGeneral PublicMajor System OutageDenial of ServiceIs the incident contained?C (i) If no plan invoked, provide details of actions taken.3[if "No" selected, provide additional details here]  2 7Have customers, clients, staff, been formally notified?Phishing EmailInfected WebsiteUSDBYODOther Social EngineeringInternal`If the source is external, do you know the IP address of servers/persons involved in the breach?!What is the source of the breach?EHave any steps been taken to secure chain of custody of any evidence?$Have you preserved system log files?N (i)If no, provide details of steps being taken to resolve the issue.?Was there any transactional data loss that cannot be recovered?=[if "Yes" selected, provide details of IP addresses(s) here]  < jIf "Yes" selected above, have system log files been subjected to a hash algorithm to ensure admissibility?j2. Form to be completed by a member of staff authorised by the Board of Directors to discuss the incident.=Have other entities within the group structure been affected?2Jurisdiction in which the incident was discovered:Event DescriptionAHas the Licensee engaged a third party to assist with the matter? (i) If so, provide third party details including qualifications and relevant experience in handling cyber security matters.Z1. Notify the Authority promptly. For new incidents complete and submit the entire form.  'Who has been notified of the incident? _[if additional persons are notified please select "Other" and provide additional details here]  ^ g[if additional classifications are required please select "Other" and provide additional details here]  f 4. Follow up reports to a specific incident, please complete relevant fields relating to update and reference previous incident report(s) in Section A (2). Reference No.XXXX01-Jan-2018 12:30PMrY oZf<[3_\V]^i``ac hd_ e f ikccB ZO  x@n`t{t  dMbP?_*+%,&ffffff?'ffffff?(?)?M <XX"<XX333333?333333?&<3cU } @} >@} *M@} @} * @x,,,,,,,,,   , , ,,,,,,,,,,,,,,,,,Y@,SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS R S ig jh R S?? SSSS T SSS Sb SSS S\ SSS S SSS Sf SSSSSSS U USS~ U? V3 SSS W6 hiSS X2 B SS Y C D SZC E SZCCSZCCSZCCSZCCSZCCSZCCSZCCSZCCDl4*004 ,!,",#,$,%,&,',(,),*,+,,,-w@.g@/,0,1,2,3,4,5,6,7,8,9,:,;,<,=,>,?, S[CC!SS?S"S "\( "E "S#S #\ #E #S$S $\0 $E $S%SS?S~ &U@ &V5 &?S'U ']) 'C!'S (U^ (F*(S)U )Y )C!)k *U[ *F *S+U +[_ +E +S,S ,_ ,hi,S-S -X^ -B -S.S .`] .H!.S /S[ /F'/S0S 0a 0IS1SZIS2SZIS3SZIS4SZIS5SZIS6SZIS7SZIS8SZIS9S 9Y 9C!9k :S[ :F :S;S ;Yc ;C!;k <SZ <C!<k =SZ =C!=k >S[ >Fd>S?S ?\- ?C!?kDl000*0&0&0000&&0&0&&&@,A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,WX,Y,Z,[@\,],^,_, @S\ @C!@k AS\ AC!Ak BS\ BFeBkCS C\9 CC!CSDS D\ DC!DSES E\K EE EkFS F\` FC!FkGS G\a GE GkHS H\J HJ!HSIS IbX IFLIkJSS?S~ KU@ KV4 K?SLS LY/ LD.LSMSZCSNSZCSOSZCSPSZCSQSZCSRSZCSSSZCSTSZCkUS[CSVSS?SWS W`7 WK!WS XSZ XL'XSYS YY, YM!YS ZS[ ZF'ZS[S [c+ [N [S\SS?S~ ]U@ ]V" ]?S^S ^Y# ^C!^S _S[ _F'_SDl&&&0000000*00&0&0*0`,a,b,c,d,e,f,g,h,i,j,k,l,mn,o@p,q,rs,t,u,v,w,`S `Y& `C!`S aS[ aF'aSbS bXM bM!bk cS_ cO'cSdSdPS~ eU@ eV$ e?SfS fY% fC!fS gS[ gF<gShS he8 hE hSiSS?S~ jU@ jV1 j?SkS kXU kQ!kk lS_ lO llmS mfT mC!mk nS_ nOZnloS ogV oC!ok pS_ pO'plqS qXW qA!qkrS rg[ rJ!rl sS_ sF'sStS tXY tC!tk uS_ uF'uSv??G?w????40&0&*0&0*0&0&0&00&0&^(  ~ + < =))MWM]6 +  "<Loss of Client Data<~~ , <` ))M$O3]6 ,  " <!Loss of Licensee/Non-Client Data< ~~ - <))OP"]6 -  "+<,Loss of confidential/sensitive information <+~~ . <))2]6 .  "!<"Bank Licence (Class A or Class B)<!~~ / < ))3]6 /  "<Corporate Services Licence<~~ 0 < ))]6 0  "<Companies Management Licence<~~ 1 < ))U]6 1  "<Controlled Subsidiary (Trust)<~~ 2 < ))G]6 2  "<Insurance Licence<~~ 3 < ))?]6 3  "7<8Mutual Fund Administrators Licence (Full or Restricted)<7~~ 4 < ))]6 4  "<Private Trust Company (PTC)<~~ 5 < ))]6 5  " < SIBL Licence< ~~ 6 <p ))]6 6  "<SIBL Excluded Person<~~ 7 <p )) !]6 7  "-<.Trust Licence (Full / Restricted/ or Nominee)<-~~ D < ))01]6 D  "<Group Entities (if applicable)<~~ E < ))1W2]6 E  "<Regulated Parents<~~ F < ))2J3"]6 F  "<Unregulated Parent<~~ G < ))2"43]6 G  "<Regulated Subsidiaries<~~ H <` ))3x5"]6 H  "<Unregulated Subsidiaries<~~ I <))56"]6 I  "<Clients<~~ J <))67"]6 J  "<Sub-Contractors<~~ K <@))7U8]6 K  "<Business Associates<~~ X <))PQ]6 X  "+<,Loss of Personally Identifiable Information<+~~ Y <))QPR"]6 Y  " <!Loss of Payment Card Information< ~~ Z <PR))QS3]6 Z  "<Loss of usernames or passwords<~~ [ <P{))ST"]6 [  "#<$Temporary loss of access to systems<#~~ \ <~))SU]6 \  "#<$Permanent loss of access to systems<#~~ ] <|))TV]6 ]  "<Physical damage < ^ pA??header2Picture 3header23]&^`>@d Sheet1ggD ZO 3K  dMbP?_*+%,&ffffff?'ffffff?(?)?",333333?333333?&<3U } 3,,,,,,,,, , , , , ,,,,,,,,,,,,,,,,, !  >:   E F  = !     G  !  >;   H B I  !     > ?@D ,!,",#,$,%,',(,),+,,,-,.,/,0,1,2, @ !A "B #C $D % '! ( ) +! ,S -N .O /P 0Q 1R 2 &B@>@### Sheet3ggD Oh+'0HPh 'Wilson, EricMicrosoft Office UserMicrosoft Macintosh Excel@~ .9@l9@s{r ՜.+,0HP X`hp x ' Incident ReportSheet3  Worksheets  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWYZ[\]^_abcdefgRoot Entry FWorkbookSummaryInformation(XDocumentSummaryInformation8`