On October 21, 2020, the State Bank of Vietnam issued the Circular No. 09/2020/TT-NHNN prescribing information system security in banking operations.
According to the Circular No. 09/2020/TT-NHNN of the State Bank of Vietnam, each institution shall be responsible for sending a report to SBV (via the Information Technology Administration), including:
1. Reports on information security incident (made according to the Appendix 01 enclosed herewith) shall be submitted within 24 hours from the time of detection of the incident, and reports on incident handling results (made according to the Appendix 02 enclosed herewith) shall be submitted within 05 working days from the completion of handling works. Reports shall be sent to the following email: antt@sbv.gov.vn.
2. Reports on risk assessment as prescribed in Clause 3 Article 33 hereof shall be sent directly or by post to SBV (via the Information Technology Administration) in case outsourced administration services are employed for information systems of level 3 or higher and information systems that process clients’ information at least 10 working days before using such services.
3. Reports on cases in which individuals working in the information technology sector of the institution have been disciplined according to Clause 6 Article 16 hereof shall be sent directly or by post to SBV (via the Information Technology Administration) within 5 working days from the date of issue of disciplinary decision.
View more details at the Circular No. 09/2020/TT-NHNN of the State Bank of Vietnam, effective from January 01, 2021.
Thuy Tram
Address: | 19 Nguyen Gia Thieu, Vo Thi Sau Ward, District 3, Ho Chi Minh City |
Phone: | (028) 7302 2286 |
E-mail: | info@lawnet.vn |