PROVISION OF CENTRAL BANK OF THE RUSSIAN FEDERATION

of December 7, 2023 No. 833-P

About requirements to ensuring information security for participants of platform of digital ruble

This Provision based on article 82.10 of the Federal Law of July 10, 2002 No. 86-FZ "About the Central bank the Russian Federation (Bank of Russia)", Item 7 parts 1, parts 3 of article 30.7 of the Federal Law of June 27, 2011 No. 161-FZ "About national payment system" and according to the solution of the Board of directors of the Bank of Russia (the minutes of the Board of directors of the Bank of Russia of September 27, 2023 No. PSD-39) establish requirements to ensuring information security for participants of platform of digital ruble.

1. For participants of platform of digital ruble (further - requirements to ensuring information security) participants of platform of digital ruble, being credit institutions shall fulfill requirements to ensuring information security (further - participants of platform).

2. Requirements to ensuring information security extend to the automated systems, the software, computer aids, the telecommunication equipment which operation is performed by participants of platform and which are used when forming (preparation), processing, transfer and storage of the following protected information (further - objects of information infrastructure):

information containing in the documents constituted when implementing the transactions with digital rubles created by participants of platform, users of platform of digital ruble and the operator of platform of digital ruble;

information necessary for identification, authentications and authorizations of users of platform of digital ruble when making actions for the purpose of implementation of transactions with digital rubles;

information on provision, suspension, renewal or the termination of access to platform of digital ruble, on the account of digital ruble, on remaining balance of digital rubles on the account of digital ruble, and also about committed transactions with digital rubles;

information on the transactions performed and planned to execution containing the conditions provided by part two of Article 309 of the Civil code of the Russian Federation;

key information of the means of cryptographic information security (further - SKZI) used for ensuring cryptographic protection of transactions with digital rubles (further - cryptographic keys);

information on the configuration determining parameters of work of objects of information infrastructure, and also information on the configuration determining parameters of operation of technical means of information security.

3. In case of safety of objects of information infrastructure which operation is performed by participants of platform and which are objects of critical information infrastructure of the Russian Federation are applied including the requirements and procedure established by public authorities of the Russian Federation in the field of safety of critical information infrastructure of the Russian Federation according to article 6 of the Federal Law of July 26, 2017 No. 187-FZ "About safety of critical information infrastructure of the Russian Federation".

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info