2025-09-11 | Instrução Normativa BCB 664Added
This instruction sets compliance deadlines for Information Technology Service Providers (PSTIs) operating when Resolution BCB No. 498 takes effect. PSTIs must implement specific information security policy aspects within 15 days and the fraud management policy within 30 days of the instruction's entry into force. Additionally, PSTIs must submit a reasonable assurance report from an independent audit firm within 15 days after implementing these measures. Failure to meet these deadlines subjects the PSTI to precautionary measures under Resolution BCB No. 498.
BCB published 15 documents in the last 30 days — get each new one by email the day it lands.
BCB NORMATIVE INSTRUCTION NO. 664, OF SEPTEMBER 11, 2025
Establishes deadlines for the Information Technology Service Provider – PSTI, operating on the date of entry into force of BCB Resolution No. 498, of September 5, 2025, to make the necessary adaptations to comply with the rules on information security policy and fraud management policy established in said Resolution.
The Head of the Information Technology Department (Deinf), in the exercise of its authority, in view of the provisions of Art. 71, item V, of the Internal Regulations of the Central Bank of Brazil, annexed to BCB Resolution No. 340, of September 21, 2023, and considering the provisions of BCB Resolution No. 498, of September 5, 2025,
Read the rest free, and get an email when BCB publishes again
Source: Banco Central do Brasil — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works