BRPD Circular No. 09: Guideline on ICT Security for Banks and Non-Bank Financial Institutions

BRPD Circular No. 09 Banking Regulation and Policy Department Bangladesh Bank Head Office Dhaka. BRPD Circular No.-09 02 Ashwin, 1422 Date: -------------------- 17 September, 2015 Managing Director / Chief Executive Officer All Scheduled Banks operating in Bangladesh. Dear Sir, Subject: Compliance with the Guideline on ICT Security for Banks and Non-Bank Financial Institutions.

Reference is invited to BRPD Circular No. 14, dated October 23, 2005 and BRPD Circular No. 21, dated May 20, 2010 on the subject cited above.

With Bangladesh entering the era of digitalization, remarkable progress has been made in the field of ICT technology along with other technologies. In this stream of technological advancement, although considerable progress has been achieved in the banking sector of Bangladesh, the associated risks are becoming increasingly complex. Bangladesh Bank is working tirelessly to identify and counter the risks in question. In this context, to enable banks and financial institutions to counter IT-related risks more effectively and productively, a number of amendments have been made to the Guideline on ICT Security for Banks and Non-Bank Financial Institutions, which was originally issued in 2005 and subsequently amended in 2010, based on the supervision of a committee formed with representatives of Bangladesh Bank and scheduled banks operating in Bangladesh, and the views of stakeholders. The amended guideline is available on the website of Bangladesh Bank at www.bb.org.bd. Instructions are given to follow/comply with the guideline.

This instruction will come into force immediately.

Please acknowledge receipt.

Yours faithfully, (Md. Saiful Islam) Deputy General Manager Phone: 9530341.