2021-10-21
The Governor of the National Bank of Serbia issued this Decision to establish mandatory conditions for the safe management of information-communication systems by virtual currency service providers. The regulation requires providers to implement comprehensive risk management frameworks, strict security controls including access management and cyber-attack protection, and robust business continuity and disaster recovery plans. Additionally, service providers must conduct regular internal audits and immediately report significant security incidents or operational disruptions to the National Bank of Serbia.