PROVISION OF CENTRAL BANK OF THE RUSSIAN FEDERATION

of April 20, 2021 No. 757-P

About establishment of requirements to ensuring information security, obligatory for not credit financial credit institutions, when implementing activities in the sphere of the financial markets for the purpose of counteraction to implementation of illegal financial transactions

This Provision based on article 76.4-1 of the Federal Law of July 10, 2002 No. 86-FZ "About the Central bank the Russian Federation (Bank of Russia)" (The Russian Federation Code, 2002, No. 28, Art. 2790; 2018, No. 27, the Art. 3950) establishes requirements to ensuring information security, obligatory for not credit financial credit institutions, when implementing activities in the sphere of the financial markets provided by part one of article 76.1 of the Federal Law of July 10, 2002 No. 86-FZ "About the Central bank the Russian Federation (Bank of Russia)" (The Russian Federation Code, 2002, No. 28, Art. 2790; 2020, No. 31, the Art. 5018), for the purpose of counteraction to implementation of illegal financial transactions.

Chapter 1. General requirements to ensuring information security when implementing activities in the sphere of the financial markets for the purpose of counteraction to implementation of illegal financial transactions

1.1. Not credit financial credit institutions for the purpose of counteraction to implementation of illegal financial transactions when implementing activities in the sphere of the financial markets provided by part one of article 76.1 of the Federal Law of July 10, 2002 No. 86-FZ "About the Central bank the Russian Federation (Bank of Russia)" shall perform protection of the following information obtained prepared, processed, transferred and stored in the automated systems used by not credit financial credit institutions (further respectively - the automated systems, the protected information, information security):

information containing in the documents constituted when implementing financial transactions in electronic form by employees of not credit financial credit institutions and (or) clients of not credit financial credit institutions (further - electronic messages);

information necessary for not credit financial credit institutions for authorization of the clients for the purpose of implementation of financial transactions and the certificate of the right of clients to dispose of money, securities or other property;

information on the financial transactions performed by not credit financial credit institutions and their clients;

key information of means of the cryptographic information security used by not credit financial credit institutions and their clients when implementing financial transactions (further - cryptographic keys).

If the protected information contains personal data, not credit financial credit institutions shall apply measures for safety of personal data in case of their processing according to article 19 of the Federal Law of July 27, 2006 No. 152-FZ "About personal data" (The Russian Federation Code, 2006, No. 31, Art. 3451; 2021, No. 1, the Art. 54) (further - the Federal Law "About Personal Data").

1.2. Not credit financial credit institutions shall perform ensuring information security by cryptographic information security (further - SKZI) according to technical documentation on SKZI, and also the following Federal Laws and regulatory legal acts of the Russian Federation:

The Federal Law of April 6, 2011 No. 63-FZ "About the digital signature" (The Russian Federation Code, 2011, No. 15, Art. 2036; 2021, No. 9, the Art. 1467) (further - the Federal Law "About the Digital Signature");

Federal Law "About Personal Data";

the order of the Government of the Russian Federation of November 1, 2012 No. 1119 "About approval of requirements to personal data protection in case of their processing in information systems of personal data" (The Russian Federation Code, 2012, No. 45, the Art. 6257);

the order of Federal Security Service of the Russian Federation of February 9, 2005 No. 66 "About approval of the Regulations on development, production, realization and operation of the cryptographic (cryptographic) means of information protection (The provision PKZ-2005)", the registered Ministry of Justice of the Russian Federation on March 3, 2005 No. 6382, on May 25, 2010 No. 17350 (further - the Provision PKZ-2005);

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info