Learn How to Report Your API Cyber Incident

Find out how to report cyber incidents to help safeguard your API security.

Reporting Cyber Incidents on API BCA Facilities

Any incident that could potentially affect the performance, security, or integrity of data on API BCA facilities must be reported immediately. Early reporting helps BCA take mitigation and investigation measures more efficiently while minimizing the impact on your business operations.

What to Do When a Cyber Incident Occur

If a cyber incident related to API BCA facilities occurs, take the following general steps:

• Conduct initial identification to determine the source and impact of the incident. 
  
• Temporarily secure systems or access points that may be affected
• Report immediately through BCA's official reporting channels.

When to Report

Reports must be made immediately whenever a situation arises that could potentially affect the security, smooth operation, or integrity of API BCA facilities.
This includes various conditions related to technical aspects, system security, or indications of unauthorized activity.

Information to Include

To facilitate the investigation and handling process, please include the following details when reporting an incident:

• Time and date of the incident — including when the incident first occurred or was detected.
• Brief chronology of the incident — a general description of how the incident unfolded.
• Impact caused — for example transaction disruptions, process delays, or potential data leaks.

Official Reporting Channels

You can report through:

• Your BCA Relationship Manager who serves as the PIC for your API BCA facility; or
• Halo BCA at 1500998.

Important Note:

To maintain data security and validation, reports to Halo BCA can only be made by the registered Project Manager listed on the API BCA Facility Form