THE RESOLUTION OF BOARD OF THE AGENCY OF THE REPUBLIC OF KAZAKHSTAN ON REGULATION AND DEVELOPMENT OF THE FINANCIAL MARKET

of November 23, 2022 No. 95

About modification of the resolution of Board of the Agency of the Republic of Kazakhstan on regulation and development of the financial market of September 21, 2020 No. 90 "About approval of Requirements to services of response to incidents of information security, to conducting internal investigations of incidents of information security"

Board of the Agency of the Republic of Kazakhstan on regulation and development of the DECIDES: financial market

1. Bring in the resolution of Board of the Agency of the Republic of Kazakhstan on regulation and development of the financial market of September 21, 2020 No. 90 "About approval of Requirements to services of response to incidents of information security, to conducting internal investigations of incidents of information security" (the following change is registered in the Register of state registration of regulatory legal acts at No. 21274):

in Requirements to services of response to incidents of information security, conducting internal investigations of the incidents of information security approved by the specified resolution:

state item 4 in the following edition:

"4. For the purpose of proper functioning of service of reaction the bank, the organization provides:

1) implementation, proper functioning of the program technical means automating processes of monitoring of events of information security and response to incidents of information security;

2) determination of the list of events and (or) sets of the events of information security requiring obligatory immediate response to them by service of reaction, with fixing of the taken measures (further – the list of events of information security), sources of events of information security, frequency, procedure and methods of monitoring of events of information security;

3) determination of procedure for reference of events of information security to incidents of information security, their classification and prioritization;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info