Bank Cybersecurity & Data Privacy Screening
Anweshna reads incident disclosures and vendor-risk documentation for the breach and data-exposure history that carries both financial and reputational cost.
What it screens for
- Data breaches — the scope of a disclosed breach and how many customer records were affected.
- Vendor compromises — a third-party vendor incident that exposed the bank's data or systems.
- Customer record exposure — the volume and sensitivity of records exposed.
- Phishing and account-takeover incidents — incident history affecting customer accounts.
- Regulatory notification obligations — whether state AG or federal notification requirements were met, and cyber-insurance coverage in place.
Why it's tracked as its own category
Cybersecurity & Data Privacy carries a 2% weight in the Banking ruleset — combining what the M&A ruleset splits into separate Cybersecurity and Data Privacy categories, since banking regulators tend to treat the two together under the same breach-notification regime. It's non-blocking, but an unreported breach or missed notification deadline is exactly the kind of finding that needs to surface on its own rather than being absorbed into a general compliance narrative.
Cybersecurity & Data Privacy FAQ
What does Anweshna screen for in Cybersecurity & Data Privacy?
Anweshna screens deal documents for data breaches, vendor compromises, and customer record exposure, among other signals. See the full list of signals above.
Is Cybersecurity & Data Privacy a blocking risk category?
Cybersecurity & Data Privacy carries a 2% weight in Anweshna's composite score. It is a tracked, non-blocking category — it contributes to the overall risk posture but does not independently halt a deal.