Issued by NRB's Payment Systems Department in August 2023 for A, B, C and D class BFIs, payment system operators and payment service providers. The board is ultimately responsible for cyber risk (item 17), a senior executive such as a CISO with direct access to the board is expected (items 30 to 32), and a cyber incident that could be material or systemic is to be reported immediately to the relevant authorities (item 127, Section F).
Who it applies to
Banking · Payments & Fintech
Topics
Cybersecurity & IT RiskOperational Risk & Outsourcing
This site uses only the cookies it needs to work, such as keeping you logged in. It uses no advertising or tracking cookies.
Read the Cookie Notice.
Suggest a correction or addition
Spotted something wrong, missing or worth adding? Tell our editors. Every submission
is reviewed and verified against its source before anything changes — nothing you send appears on the
site automatically.
Thank you — our editors will review this
Your suggestion has been received. Contributions from practitioners keep these profiles accurate. Nothing appears on the site until an editor has verified it against its source.
