RESOLUTION OF NATIONAL BANK OF THE REPUBLIC OF MOLDOVA

of February 12, 2025 No. 29

About approval of Regulations about the minimum requirements to risk management of information and communication technologies, information security and going concern and modification of some regulations

Based on part (3) Art. 32-1, of part (3) Art. 32-2 of the Law on payment services and electronic money No. 114/2012 (The official monitor of the Republic of Moldova, 2012, No. 193-197, the Art. 661) and parts (6) Art. 38-2 of the Law on activities of banks No. 202/2017 (The official monitor of the Republic of Moldova, 2017, No. 434-439, the Art. 727) the Executive committee of National Bank of Moldova DECIDES:

1. Approve Regulations about the minimum requirements to risk management of information and communication technologies, information security and going concern according to appendix.

2. Declare invalid the Resolution of Executive committee of National Bank of Moldova on approval of Regulations on the minimum requirements to information and communication systems of banks No. 47/2018 (The official monitor of the Republic of Moldova, 2018, No. 113-120, the Art. 491), registered in the Ministry of Justice of the Republic of Moldova at No. 1307 of March 28, 2018.

3. In item 271 of Regulations about bases of the management of activities of banks approved by the Resolution of Executive committee of National Bank of Moldova No. 322/2018 the text "The regulations about the minimum requirements for information and communication systems of banks approved by the Resolution of Executive committee of National Bank of Moldova No. 47/2018" to replace with the text "Regulations about the minimum requirements to risk management of information and communication technologies, information security and going concern".

4. In item 2 of Regulations about outsourcing of types of activity and transactions of the bank approved by the Resolution of Executive committee of National Bank of Moldova No. 46/2020, the text "The regulations about the minimum requirements for information and communication systems of banks approved by the Resolution of Executive committee of National Bank of Moldova No. 47/2018" to replace with the text "Regulations about the minimum requirements to risk management of information and communication technologies, information security and going concern".

5. To payment service providers, the provided items a) - d) parts (1) Art. 5 of the Law on payment services and electronic money No. 114/2012, to provide compliance of provisions of item 81 of the Regulations specified in the item 1, - within 3 months, to provisions of item 4-56, of the item 62, to item 65-67, of item 76-80 and item 82 of the Regulations specified in the item 1, - within 9 months, to item provisions 57, with the item 58, subitem 58.1-58.11 of the Regulations specified in the item 1, - within 12 months, to provisions of subitem 58.12-61, of item 63-64 and item 68-75 of the Regulations specified in the item 1, - within 15 months, from the date of entry into force of this resolution.

6. This resolution becomes effective after one month from the date of its publication in the Official monitor of the Republic of Moldova.

Approved by the Resolution of National Bank of the Republic of Moldova of February 12, 2025, No. 29

Regulations about the minimum requirements to risk management of information and communication technologies, information security and going concern

Chapter I. General provisions

Part 1. Scope

1. These Regulations extend to the payment service providers (further - organizations) provided by the item and) - d) parts (1) Art. 5 of the Law on payment services and electronic money No. 114/2012, and establishes the minimum requirements to risk management of information and communication technologies (further - ICT), information security and going concern.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info