RESOLUTION OF BOARD OF NATIONAL BANK OF THE REPUBLIC OF KAZAKHSTAN

of January 28, 2016 No. 34

About approval of Requirements to safety and continuousness of work of information systems of banks, branches of nonresident banks of the Republic of Kazakhstan and the organizations performing separate types of banking activities

According to the subitem 85) "About National Bank of the Republic of Kazakhstan" the Board of National Bank of the Republic of Kazakhstan DECIDES: parts two of article 15 of the Law of the Republic of Kazakhstan

1. Approve the enclosed Requirements to safety and continuousness of work of information systems of banks, branches of nonresident banks of the Republic of Kazakhstan and the organizations performing separate types of banking activities.

2. And managements of payment systems (Musayev R. N.) in the procedure established by the legislation of the Republic of Kazakhstan to provide to development department:

1) together with Legal support department (Sarsenov N. V.) state registration of this resolution in the Ministry of Justice of the Republic of Kazakhstan;

2) the direction of this resolution in the republican state company on the right of economic maintaining "The republican center of legal information of the Ministry of Justice of the Republic of Kazakhstan":

on official publication in information system of law of Ad_let within ten calendar days after its state registration in the Ministry of Justice of the Republic of Kazakhstan;

for inclusion in the State register of regulatory legal acts of the Republic of Kazakhstan, Reference control bank of regulatory legal acts of the Republic of Kazakhstan within ten calendar days from the date of its obtaining by National Bank of the Republic of Kazakhstan after state registration in the Ministry of Justice of the Republic of Kazakhstan;

3) placement of this resolution on official Internet resource of National Bank of the Republic of Kazakhstan after its official publication.

3. To department of the international relations and public relations (Kazybayev A. K.) provide the direction of this resolution on official publication in periodic printing editions within ten calendar days after its state registration in the Ministry of Justice of the Republic of Kazakhstan.

4. To impose control of execution of this resolution on the vice-chairman of National Bank of the Republic of Kazakhstan Pirmatov G. O.

5. This resolution becomes effective since January 1, 2017 and is subject to official publication.

Approved by the Resolution of Board of National Bank of the Republic of Kazakhstan of January 28, 2016 No. 34

Requirements to safety and continuousness of work of information systems of banks, branches of nonresident banks of the Republic of Kazakhstan and the organizations performing separate types of banking activities

Chapter 1. General provisions

1. These Requirements to safety and continuousness of work of information systems of banks, branches of nonresident banks of the Republic of Kazakhstan and the organizations performing separate types of banking activities (further - Requirements), parts two of article 15 of the Law of the Republic of Kazakhstan "About National Bank of the Republic of Kazakhstan" are developed according to the subitem 85) and determine requirements to safety and continuousness of work of information systems of banks, branches of nonresident banks of the Republic of Kazakhstan and the organizations performing separate types of banking activities (further - banks) by means of which rendering electronic banking services is provided.

2. In Requirements concepts, the stipulated in Article 1 Law of the Republic of Kazakhstan "About payments and payment systems", by article 1 of the Law of the Republic of Kazakhstan "About informatization", the Rules of rendering by the banks, branches of nonresident banks of the Republic of Kazakhstan and the organizations performing separate types of banking activities, electronic banking services, approved by the resolution of Board of National Bank of the Republic of Kazakhstan of August 31, 2016 No. 212, registered in the Register of state registration of regulatory legal acts at No. 14337 are used (further – Rules No. 212), and also the following concepts:

1) object of information system - the separate component of information system intended for transfer, processing and storage of information for accomplishment of separate function when rendering electronic banking services;

2) the main center of information system of bank (further - the main center) - set of the program technical means and service personnel providing rendering electronic banking services in the normal (daily) mode;

3) the reserve center of information system of bank (further - the reserve center) - set of the program technical means and service personnel providing rendering electronic banking services in case of unusual situations or carrying out planned technical works in the main center;

4) information system of bank for rendering electronic banking services (further - information system) - the system intended for storage, processing, search, distribution, transfer and provision of information using the hardware and software by means of which rendering electronic banking services is provided;

5) the ranking officer - the employee of bank responsible for work in information system according to job responsibilities;

6) workplace - the personal computer (server) on which the program and user interface for management of information system or objects of information system is established;

7) team of recovery - employees of bank and the organizations rendering services in ensuring availability and full functioning of information system or objects of information system which provide complete recovery taking into account idle time, established by internal documents of bank, or transfer of work of information system to the reserve center;

8) the user - the client of bank addressing information system for receipt of electronic banking services, or the ranking officer;

9) identification - confirmation of authenticity of the subject or access object to information system by determination of compliance of the shown access details.

3. Management of operational risk, going concern, risks of information technologies, information security for the purpose of safety and continuousness of work of information systems of banks, except for the organizations performing separate types of banking activities is performed according to the resolution of Board of National Bank of the Republic of Kazakhstan of November 12, 2019 No. 188 "About approval of Rules of forming of risk management system and internal control for banks of the second level, branches of nonresident banks of the Republic of Kazakhstan", registered in the Register of state registration of regulatory legal acts at No. 19632.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info