Management of Technical Vulnerabilities in Banking Operations

According to Article 43 of Circular 09/2020/TT-NHNN (Effective from January 1, 2021), regulations on managing technical weaknesses are stipulated as follows:

- Develop regulations on the assessment, management, and control of technical weaknesses in currently used information systems.

- Regularly update information related to vulnerabilities and technical weaknesses.

- Perform periodic scanning for vulnerabilities and weaknesses in information systems as prescribed in Clause 3, Article 42, or upon receiving information related to new vulnerabilities and weaknesses.

- Assess the impact level and risk of each detected technical vulnerability and weakness in currently used information systems and propose response plans and handling schemes.

- Develop, implement remediation solutions, and report the results of the handling process.

The above content pertains to the management of technical weaknesses in banking activities according to the latest regulations.

Kind regards!