RESOLUTION OF BOARD OF THE NATIONAL BANK OF UKRAINE

of November 26, 2015 No. 829

About approval of regulatory legal acts concerning information security

According to Articles 7, 56 Laws of Ukraine "About the National Bank of Ukraine", for the purpose of settlement of relations between the National Bank of Ukraine and banks of Ukraine, their branches, the public, non-bank institutions which use means of information protection of the National Bank of Ukraine in connection with regulation of centralized procedure for the conclusion and maintaining agreements on providing with means of information protection the National Bank of Ukraine the Board of the National Bank of Ukraine decides:

1. Approve:

1) Regulations on protection of electronic bank documents with use of means of information protection of the National Bank of Ukraine which is applied;

2) Rules of the organization of protection of electronic bank documents with use of means of information protection of the National Bank of Ukraine which are applied;

3) Regulations on procedure for test of condition of information security in bank and other institutions which use means of information protection of the National Bank of Ukraine which is applied.

2. Recognize invalid:

the resolution of Board of the National Bank of Ukraine of April 02, 2007 No. 112 "About approval of Rules of the organization of protection of electronic bank documents with use of means of information protection of the National Bank of Ukraine", registered in the Ministry of Justice of Ukraine on April 24, 2007 at No. 419/13686;

the subitem 2 of Item 1 of the resolution of Board of the National Bank of Ukraine of July 7, 2015 No. 439 "About modification of some regulatory legal acts of the National Bank of Ukraine".

3. To department of information security (Lukyanov D. A.) bring contents of this resolution to the attention of the Central clearing house of the National Bank of Ukraine, banks of Ukraine, their branches, bodies of the Public treasurer service of Ukraine, other public authorities, non-bank organizations using means of information protection of the National Bank of Ukraine for use in work.

4. To impose control over the implementation of this resolution on the vice-chairman of the National Bank of Ukraine Smoliya Ya. V.

5. The resolution becomes effective from the date of, its official publication following behind day.

Approved by the Resolution of Board of the National Bank of Ukraine of November 26, 2015 No. 829

Regulations on protection of electronic bank documents with use of means of information protection of the National Bank of Ukraine

I. General provisions

1. This Provision is developed according to Articles 7, 56 of the Law of Ukraine "About the National Bank of Ukraine", article 66 of the Law of Ukraine "About banks and banking activity", the Laws of Ukraine "About payment systems and money transfer in Ukraine", "About information security in information and telecommunication systems" and regulatory legal acts of the National Bank of Ukraine (further - National Bank) in the sphere of information security.

2. In the text of the Provision terms and reducings are used in such value:

1) the information security administrator - the specialist in questions of information security appointed by the internal document of the organization for ensuring implementation and support of work of means of information protection of National Bank in this organization;

2) AKZI - the equipment of cryptographic information security which is property of National Bank;

3) automated workplace of the accountant of SAB - the automated workplace of system of automation of bank on which forming of files / the on-line packets containing initial payments of electronic payment system of National Bank is performed;

4) ARM-NBU-inf - the software "The automated workplace of exchange of not payment information" of National Bank intended for exchange of information between system of automation of bank and information tasks;

5) OK - open key;

6) the EDS - the digital signature;

7) SZI - means of information protection of National Bank which are used in electronic payment system of National Bank and information tasks;

8) information tasks - the software and hardware complexes of automation of banking activity providing processing and information transfer, the electronic payment system of National Bank which is not relating to payment and technological information with use of means of information protection of National Bank between bank and other institutions and National Bank;

9) cryptolibraries - libraries of cryptographic functions - imposing and verification of the digital signature, enciphering and decoding of information;

10) the organization - bank or other institution which is direct participant of electronic payment system of National Bank and/or information tasks and uses means of information protection of National Bank;

11) the organization customer - bank or other institution which joins the Single agreement of bank servicing and provision of other services by the National Bank of Ukraine (further - the Single agreement) for receipt of services of the National Bank of Ukraine in provision in use of means of information protection of National Bank;

12) PMGK - the software or hardware-software module of generation of keys of cryptographic information security which is property of National Bank;

13) SAB - system of automation of bank;

14) system of information security - set of methods and means, including hardware-software, the software of information security of National Bank, key information and system of distribution of key information, technological control facilities and organizational actions providing protection of electronic bank documents;

15) SEP - electronic payment system of National Bank;

16) SK - smart card;

17) strict authentication - identification of each user on the basis of ownership of the confidential key;

18) CURRENT - the table of open keys;

19) shopping mall - secret key.

Other terms and reducings used in this Provision are used in the values determined by the Law of Ukraine "About electronic documents and electronic document management", the standards on information security management in bank system of Ukraine approved by the resolution of Board of the National Bank of Ukraine of October 28, 2010 No. 474, the Instruction about interbank money transfer in Ukraine in the national currency approved by the resolution of Board of the National Bank of Ukraine of August 16, 2006 No. 320, registered in the Ministry of Justice of Ukraine on September 6, 2006 at No. 1035/12909 (with changes).

3. This Provision determines the principles of creation of system of information security and procedure for obtaining and return of SZI by the organizations.

4. Direct members of SEP receive SZI for use in SEP and information tasks irrespective of model of servicing of the consolidated correspondent account of bank in SEP. The indirect members of SEP and organization who are not members of SEP receive SZI for use in information tasks of National Bank.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info