Requirements for data center in banks in Vietnam

Recently, the State Bank of Vietnam has issued the Circular No. 09/2020/TT-NHNN prescribing information system security in banking operations.

HTTT ngân hàng, Thông tư 09/2020/TT-NHNN

According to Article 18 of the Circular No. 09/2020/TT-NHNN of the State Bank of Vietnam, apart from the requirements referred to in Article 17 hereof, a data center must meet the following requirements:

1. Entrance or exit gate/door of the data center must have 24/7 security guards.

2. Entrance and exit doors must be firm, have a firefighting capability, use at least two distinct types of security keys and be put under 24/7 guard and surveillance.

3. Areas for installation of information technology equipment must be protected from direct sunlight, and prevented from leakage and flood. Areas for installation of equipment of an important information system of level 3 or higher must be put under 24/7 guard and surveillance.

4. The data center must have at least one power source supplied by the power transmission grid and one supplied by the power generator. There is an automatic transfer switch between two power sources. Whenever the power source supplied by the power transmission grid is cut, the power generator must automatically run to supply power. The power source must be connected through the uninterruptible power supply (UPS) system to supply power for equipment and ensure the capability of maintaining operations of such equipment.

5. It must be equipped with an air conditioning system which must be capable of continuously operating.

6. It must be equipped with a lightning protection system and a surge protection device.

7. It must be equipped with an automatic fire alarm and firefighting system. Firefighting activities must not cause damage to built-in equipment, unless the institution has established a standby system which shall ensure the absolute security of data and be capable of completely substituting the main system for 01 hour.

8. It must be equipped with a technical floor system or electrification insulating layer, and grounding system.

9. It must be equipped with a surveillance camera system which has capacity for storing data within at least 90 days.

10. It must be equipped with a temperature and humidity monitoring and controlling system.

11. It must have an entry and exit logbook.

View more details at the Circular No. 09/2020/TT-NHNN of the State Bank of Vietnam, effective from January 01, 2021.

Thuy Tram

>> CLICK HERE TO READ THIS ARTICLE IN VIETNAMESE

155 lượt xem



  • Address: 19 Nguyen Gia Thieu, Vo Thi Sau Ward, District 3, Ho Chi Minh City
    Phone: (028) 7302 2286
    E-mail: info@lawnet.vn
Parent company: THU VIEN PHAP LUAT Ltd.
Editorial Director: Mr. Bui Tuong Vu - Tel. 028 3935 2079
P.702A , Centre Point, 106 Nguyen Van Troi, Ward 8, Phu Nhuan District, HCM City;