Approved by Board of the Central bank of the Republic of Uzbekistan on February 5, 2000 No. 461 ( the protocol No. 2/5)

REGULATIONS ON ANTI-VIRUS PROTECTION IN THE AUTOMATED BANK SYSTEMS OF THE REPUBLIC OF UZBEKISTAN

1. General provisions

1.2. The provision determines main objectives, tasks, the organization of works and responsibility of persons by anti-virus protection in banks of the Republic of Uzbekistan.

1.3. The purpose of works on anti-virus protection is prevention of losses of information in the automated bank systems.

1.4. Tasks of anti-virus protection are:

- determination of structure and regulations of start of anti-virus diagnostic means, regulations of their audit and updating;

- carrying out scheduled maintenance using anti-virus diagnostic means;

- continuous ensuring information security from action of malicious applications at all operational phases of the automated bank system.

2. Main determinations

2.1. The computer virus is program (some set of the carried-out code) having destructive properties capable to create the copies (which are not necessarily completely matching the original) and to implement them in various resources of computer systems, networks, etc. without the knowledge of the user. At the same time copies keep capability of further distribution.

2.2. The anti-virus program - the program finding and neutralizing action of computer virus by means of removal it from resources of computer systems, networks, etc.

2.3. Anti-virus protection - package of measures, directed to prevention, detection and neutralization of actions of computer virus by means of anti-virus programs.

2.4. Participants of works on anti-virus protection are users of personal computers, specialists in anti-virus protection, administrators of the information network (IN).

3. Organization of works on anti-virus protection

3.1. The head of bank provides the organization of works on anti-virus protection.

3.2. In bank specialists of divisions of informatization, and in the Central bank of the Republic of Uzbekistan (further - the Central bank) - specialists of Department of payment systems and information technologies and Department of safety are engaged in planning and holding actions for anti-virus protection and information are sewn up. If necessary, specialists of the State unitary enterprise "The main center of informatization of the Central bank of the Republic of Uzbekistan can be involved in these works.

3.3. The bank shall have licensed means of anti-virus information security or other means of anti-virus protection certified by authorized state bodies.

3.4. All actions for anti-virus protection are subdivided on individual and centralized. Individual are conducted by each user independently, centralized by meropriyatiyaspetsialist on anti-virus protection together with the IVS administrator.

3.5. Individual actions consist in check of operating system and its elements in case of turning on of the computer, and also, if necessary, and in the course of work on the computer. Means of anti-virus protection shall be established and be updated by specialists in anti-virus protection on a centralized basis according to the actions plan with the subsequent registration in magazines on installation and updating of means of anti-virus protection at least, than once a month. Specialists in anti-virus protection bear responsibility for relevance of the anti-virus programs installed on workplaces.

3.6. Centralized actions include scheduled maintenance on anti-virus protection for servers of the bank automated system, selective check of personal computers, scheduled inspection of the archives placed on external carriers.

3.7. Scheduled maintenance on anti-virus protection of servers public is carried out by specialists in anti-virus protection together with the IVS administrator. Frequency of their carrying out shall correspond to frequency of creation of long-term archives, but at least 1 time a week. Updating of base of anti-virus programs on servers is assigned to specialists in anti-virus protection.

3.8. Scheduled inspection of the archives placed on external carriers is carried out jointly by specialists in anti-virus protection and IVS administrator, according to the approved schedule.

3.9. Selective check of computers is carried out by specialists in anti-virus protection. The result of carrying out selective check is registered in the special magazine. In case of detection of viruses the specialist in anti-virus protection takes all necessary measures for liquidation of viruses upon completion of which the act with indication of the carried-out works, the lost information and preliminary origin of virus is drawn up. This act is signed by the user of the personal computer and the specialist in anti-virus protection, and also the division manager behind whom the personal computer, and the head responsible for information security is fixed in bank. The head responsible for information security in bank, makes office investigation of origins of computer virus in accordance with the established procedure by results of which adequate measures of impact shall be taken.

3.10. In case of detection it is necessary to provide operational information about origin, type and the characteristic of virus in Head departments of the Central bank of the Republic of Uzbekistan on the Republic of Karakalpakstan, areas and the city of Tashkent in bank departments of computer virus.

3.11. Events for anti-virus protection are held according to the following documents:

- The actions plan on anti-virus protection;

- Rules of holding individual actions for anti-virus protection;

- Technique of holding centralized actions for anti-virus protection;

- Job descriptions of participants of works on anti-virus protection.

These documents are developed by each head commercial bank independently and approved with Department of safety and information of the Central bank regarding ensuring information security in case of information exchange with software and hardware complexes of the Central bank are sewn up.

3.12. The actions plan is developed annually. The actions plan shall include: scheduled maintenance, selective checks, actions for creation of the reporting and distribution of means of anti-virus protection in bank.

4. Requirements to participants of works on anti-virus protection

4.1. The requirements to qualification including special knowledge of technology of anti-virus protection and work experience with anti-virus means of information protection shall be provided in job descriptions of the specialist in anti-virus protection.

4.2. Functions on holding centralized actions for anti-virus protection shall be provided in job descriptions of the IVS administrator.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info