2015-06-22
The Supervisor of Banks issued this directive requiring banking corporations to establish a comprehensive cyber defense management framework to mitigate intensifying cyber risks. The regulation mandates specific corporate governance structures, including the appointment of a Chief Cyber Defense Officer with defined authorities and responsibilities for risk oversight. Banks must implement robust strategies encompassing threat prediction, detection, and resilience, while conducting regular risk assessments and internal audits to ensure continuous protection of operations and customer data.