Region

Jurisdiction

Regulator

2024-01-17

Added 2026-06-03 · Updated 2026-07-08

Directive 4230/2024-00037 on Incident Management and Response for Regulated Institutions

The National Bank of Romania issued Directive 4230/2024-00037 to establish comprehensive requirements for incident management and response within regulated institutions. The directive mandates that institutions implement robust frameworks to identify, assess, manage, and report significant operational and cyber incidents. It further requires regular testing of incident response plans and timely notification to the regulator to ensure systemic stability and effective crisis handling.