RESOLUTION OF BOARD OF NATIONAL BANK OF THE REPUBLIC OF KAZAKHSTAN

of August 31, 2016 No. 200

About approval of Requirements to the organizational measures and program technical means providing access to payment systems

According to the subitem 20) of part two of article 15 of the Law of the Republic of Kazakhstan "About National Bank of the Republic of Kazakhstan", the subitem 18) of Item 1 of article 4 of the Law of the Republic of Kazakhstan "About payments and payment systems" the Board of National Bank of the Republic of Kazakhstan DECIDES:

1. Approve the enclosed Requirements to the organizational measures and program technical means providing access to payment systems (further - Requirements).

2. Recognize invalid:

1) the resolution of Board of National Bank of the Republic of Kazakhstan of August 24, 2012 No. 269 "About approval of Requirements to the organizational measures and program technical means providing access to payment systems" (registered in the Register of state registration of regulatory legal acts at No. 7950, published on December 8, 2012 in the Kazakhstanskaya Pravda newspaper No. 427-428 (27246-27247);

2) the resolution of Board of National Bank of the Republic of Kazakhstan of January 28, 2016 No. 35 "About modification and amendments in the resolution of Board of National Bank of the Republic of Kazakhstan of August 24, 2012 No. 269 "About approval of Requirements to the organizational measures and program technical means providing access to the banks and organizations performing separate types of banking activities, to payment systems" (registered in the Register of state registration of regulatory legal acts No. 13187, published on March 14, 2016 in information system of law of Ad_let of the republican state company on the right of economic maintaining "The republican center of legal information of the Ministry of Justice of the Republic of Kazakhstan").

3. To department of payment systems (Ashykbekov E. T.) in the procedure established by the legislation of the Republic of Kazakhstan to provide:

1) together with Legal department (Sarsenov N. V.) state registration of this resolution in the Ministry of Justice of the Republic of Kazakhstan;

2) the direction of this resolution in the republican state company on the right of economic maintaining "The republican center of legal information of the Ministry of Justice of the Republic of Kazakhstan":

on official publication in information system of law of Ad_let within ten calendar days after its state registration in the Ministry of Justice of the Republic of Kazakhstan;

for inclusion in the State register of regulatory legal acts of the Republic of Kazakhstan, Reference control bank of regulatory legal acts of the Republic of Kazakhstan within ten calendar days from the date of its state registration in the Ministry of Justice of the Republic of Kazakhstan;

3) placement of this resolution on official Internet resource of National Bank of the Republic of Kazakhstan after its official publication.

4. To management on consumer protection of financial services and external communications (Terentyev A. L.) provide the direction of this resolution on official publication in periodic printing editions within ten calendar days after its state registration in the Ministry of Justice of the Republic of Kazakhstan.

5. To impose control of execution of this resolution on the vice-chairman of National Bank of the Republic of Kazakhstan Pirmatov G. O.

6. This resolution becomes effective after ten calendar days after day of its first official publication, except for Items 58, of 59, of 60, of 61, of 62, of 63 and 64 Requirements which become effective since January 1, 2017.

Approved by the Resolution of Board of National Bank of the Republic of Kazakhstan of August 31, 2016 No. 200

Requirements to the organizational measures and program technical means providing access to payment systems

Chapter 1. General provisions

1. Requirements to the organizational measures and program technical means providing access to payment systems (further - Requirements) are developed according to the laws of the Republic of Kazakhstan of March 30, 1995 "About National Bank of the Republic of Kazakhstan" (further - the Law on National Bank), of July 26, 2016 "About payments and payment systems" (further - the Law on payments and payment systems) and determine requirements to the organizational measures and program technical means providing access to payment systems as which operator the National Bank of the Republic of Kazakhstan acts (further - payment system).

Requirements include placement of workplace of the user of payment system, interaction of the user of payment system and republican state company on the right of economic maintaining "The Kazakhstan center of interbank calculations of National Bank of the Republic of Kazakhstan" (further - the Center), the terminal of payment system, key information, requirements to workplace of the user of payment service provider, the organization of works of service personnel, the requirement to management of operational risk and providing going concern of the user of payment system.

2. Requirements extend to all users of payment system.

3. In Requirements the concepts provided by the Law on payments and payment systems and the following concepts are used:

1) authentication - package of measures for confirmation of authenticity of users of system in case of exchange of payment and information messages, and also for confirmation of authenticity of payment and information messages;

2) certification center - the legal entity certifying compliance of open key of the digital signature to the closed key of the digital signature, and also confirming reliability of the registration certificate;

3) access control facilities - the technical, program or other means allowing to fix information on access to objects;

4) key information - the cryptographic keys (opened and closed) or the other information allowing to perform cryptographic transformations of information;

5) operational risk - the risk connected with violations in work of information systems or internal processes, mistakes, failures or violations in management of payment system including owing to external events;

6) unauthorized access - access to information and program resources with violation of the law of the Republic of Kazakhstan, and also procedure for access to them established by the user of payment system;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info