Cyber Reporting Plan Workshop Addresses Regulatory Double Jeopardy in Jersey

• •Mishandled cyber incidents can trigger fines from two regulators in Jersey.
• •The JOIC can impose fines up to £10 million, while the JFSC can fine firms up to £4 million.
• •Effective incident response plans must integrate cybersecurity with communication strategies.

A workshop held on July 20, 2026, by Comsure focused on the implications of mishandling cyber incidents, which can trigger dual regulatory scrutiny from the Jersey Financial Services Commission (JFSC) and the Jersey Office of the Information Commissioner (JOIC). Firms registered with the JFSC face potential fines of up to £4 million, while senior individuals could incur personal fines of up to £400,000. The JOIC can impose fines of up to £10 million under the Data Protection Law. The workshop emphasized the necessity for robust incident response plans that align cybersecurity with communication strategies. It highlighted that many organizations fail to effectively implement their incident response plans, which can lead to severe reputational damage. The new Cyber Security Law introduces additional compliance requirements for banks, including the establishment of the Jersey Cyber Security Centre (JCSC). Overall, the workshop aimed to prepare firms for the complexities of regulatory compliance in the face of cyber threats.