2024-08-16

Decision on Minimum Information System Management Standards for Financial Institutions

The Executive Board of the National Bank of Serbia issued this Decision to establish minimum standards for information system management, security, and business continuity for Serbian financial institutions. It mandates that institutions implement comprehensive risk management frameworks, internal audit processes, and strict security controls including access management and malware protection. Additionally, the regulation requires the adoption of business continuity and disaster recovery plans, with mandatory annual testing and immediate notification to the regulator in the event of significant disruptions.

National Bank of Serbia logo

Serbia

National Bank of Serbia

Click to view full text