On giving effect to the documents of Set of documents on information security standardisation

On giving effect to the Set of documents on standardisation of the Bank of Russia ‘Information Security of Organisations of Banking System of the Russian Federation’

Starting 1 June 2014, the Bank of Russia gives effect to the documents of the Set of documents on standardisation of the Bank of Russia ‘Information Security of Organisations of Banking System of the Russian Federation’ (BR ISBS Set):

the 5^th version of the Bank of Russia Standard ‘Information Security of Organisations of Banking System of the Russian Federation. General Provisions’ (STO BR ISBS-1.0-2014);

the 4^th version of the Bank of Russia Standard ‘Information Security of Organisations of Banking System of the Russian Federation. Assessment Technique for Compliance of Information Security of Organisations of Banking System of the Russian Federation with Requirements of STO BR ISBS-1.0-2014 (STO BR ISBS-1.2-2014);

recommendations on standardisation of the Bank of Russia ‘Information Security of Organisations of Banking System of the Russian Federation. Information Security Incident Management’ (RS BR ISBS-2.5-2014).

Documents of BR ISBS Set are prepared and put into operation in order to increase information security in organisations of banking system of the Russian Federation in compliance with Federal Law No. 184-FZ dated 27 December 2002 ‘On Technical Regulation’ by the decision of the Standardisation Subcommittee ‘Financial (Banking) Operations Security’ (SC1) of the Technical Standardisation Committee ‘Financial Operations Standards’ (TC122) of the Federal Agency for Technical Regulation and Metrology.

Documents of BR ISBS Set are recommended for implementation of legislative requirements of the Russian Federation in the field of personal data by the organisations of banking system of the Russian Federation.

Starting 1 June 2014, the following documents of BR ISBS Set are cancelled:

recommendations on standardisation of the Bank of Russia ‘Information Security of Organisations of Banking System of the Russian Federation. Requirements on Personal Data Security in Information Systems of Personal Data of Organisations of Banking System of the Russian Federation’ (RS BR ISBS-2.3-2010);

recommendations on standardisation of the Bank of Russia ‘Information Security of Organisations of Banking System of the Russian Federation. Industry Specific Model of Personal Data Security Threats while Processing in Information Systems of Personal Data of Organisations of Banking System of the Russian Federation’ (RS BR ISBS-2.4-2010).

Documents of BR ISBS Set will be published on the official website of the Bank of Russia in the Internet in the subsection ‘Information Security of Banking Organisations of the Russian Federations’ of section ‘Information on Credit Institutions’.

The reference to the Press Service is mandatory if you intend to use this material.

30.05.2014 00.00.00