The Central Bank of the UAE (CBUAE) takes responsibility for data protection as part of maintaining the security of its financial systems. This vulnerability disclosure policy provides transparent guidelines to researchers to enable them to discover security protection vulnerabilities, and provide a clear overview on how any identified vulnerabilities should be submitted to us.

This policy also presents a description of the research types and systems covered, a procedure for submitting vulnerability reports to us, and the terms of vulnerability proceedings, including the waiting period for security researchers prior to any public disclosure of the reported vulnerabilities.

We welcome and encourage your reports to us, to ensure the disclosure and removal of any potential system vulnerabilities.