RegAlert2021-02-26 | Resolução CMN 4893Added
CMN Resolution No. 4,893 — Cybersecurity Policy and Cloud Computing Requirements for Institutions Authorized by the Central Bank of Brazil
CMN Resolution No. 4,893 establishes cybersecurity policies and requirements for data processing, storage, and cloud computing services for institutions authorized by the Central Bank of Brazil. It mandates that institutions implement cybersecurity policies tailored to their risk profiles and business models, covering authentication, encryption, intrusion detection, and vulnerability management. The resolution explicitly excludes payment institutions, consortium administrators, and securities brokers from its scope, directing them to separate Central Bank regulations. Additional security requirements are imposed for communications on the National Financial System Network, including multi-factor authentication and logical isolation for Pix and STR environments.
BCB published 15 documents in the last 30 days — get each new one by email the day it lands.
Resolution No. 4,893
CMN RESOLUTION
NO. 4,893, OF FEBRUARY 26, 2021
Establishes the cybersecurity policy and the requirements for contracting data processing and storage services and cloud computing services to be observed by institutions authorized to operate by the Central Bank of Brazil.
The Central Bank of Brazil, in accordance with Article 9 of Law No. 4,595, of December 31, 1964, makes public that the National Monetary Council, in a session held on February 25, 2021, based on Articles 4, item VIII, of the aforementioned Law, 9 of Law No. 4,728, of July 14, 1965, 7 and 23, item "a", of Law No. 6,099, of September 12, 1974, 1, item II, of Law No. 10,194, of February 14, 2001, and 1, § 1, of Complementary Law No. 130, of April 17, 2009,
Read the rest free, and get an email when BCB publishes again
Lineage: Amended
Show all related documents (13)
- Supersedes
- Resolution No. 4658 dated 2018-04-26not in RegAlertResolution No. 4752 dated 2019-09-26not in RegAlert
- Amended by
- Central Bank Resolution No. 5,274 of December 18, 2025, Amending Resolution CMN No. 4,893 on Cybersecurity Policy and Cloud Services2025CMN Resolution No. 5117 — Amending Resolutions 4.595, 4.860, 4.879, 4.893, 4.949, 4.968, and 4.9842024
- Issued under
- Complementary Law No. 130, of April 17, 2009 – National Cooperative Credit System2009Law No. 10194 dated 2001-02-14not in RegAlertLaw No. 4595 dated 1964-12-31not in RegAlertLaw No. 4728 dated 1965-07-14not in RegAlertLaw No. 6099 dated 1974-09-12not in RegAlert
- Basis for
- Central Bank of Brazil Instruction Normative No. 592 — Extends the Effective Date of Instruction Normative No. 590 of February 5, 20252025Normative Instruction BCB No. 590 of February 5, 20252025Normative Instruction BCB No. 330 — Consolidates Procedures for Registration of Cadastre Information in the Unicad System2022
- Referred to by
- Central Bank of Brazil Normative Instruction No. 720 of April 2, 2026: Publication of Version 5.0 of the Open Finance Security Manual2026
Timeline
Amended 2 times · last 2025-12-18
Source: Banco Central do Brasil — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
More like this from BCB
BCB published 15 documents in the last 30 days. We email you each new one the day it's published.