RegAlert
2021-04-08 | Resolução BCB 85

Added

Resolution BCB No. 85 — Cybersecurity Policy and Requirements for Data Processing, Storage, and Cloud Computing Services

Resolution BCB No. 85 establishes cybersecurity policies and requirements for data processing, storage, and cloud computing services for payment institutions, securities brokerage and distribution firms, foreign exchange brokerage firms, and virtual asset service providers authorized by the Central Bank of Brazil. The regulation mandates the implementation of a cybersecurity policy compatible with the institution's risk profile and business model, specifying minimum controls such as authentication, encryption, intrusion detection, and vulnerability management. It further requires detailed procedures for incident recording, traceability, and the sharing of information regarding relevant incidents among authorized institutions.

Banco Central do Brasil logo

Brazil

Banco Central do Brasil

Scan of the document's first page
Share

BCB published 15 documents in the last 30 days — get each new one by email the day it lands.

RESOLUTION BCB NO. 85, OF APRIL 8, 2021

Provides for the cybersecurity policy and for the requirements for the contracting of data processing and storage services and cloud computing services to be observed by payment institutions authorized to operate by the Central Bank of Brazil.

Provides for the cybersecurity policy and for the requirements for the contracting of data processing and storage services and cloud computing services to be observed by payment institutions, securities brokerage firms, securities distribution firms, and foreign exchange brokerage firms authorized to operate by the Central Bank of Brazil. (Amended, effective March 1, 2024, by Resolution BCB No. 368, of January 25, 2024.)

Read the rest free, and get an email when BCB publishes again

Lineage: Amended

Law No. 12,865, of October 9, 2…2013Circular No. 3.909 dated 2018-0…not in RegAlertCircular No. 3.969 dated 2019-1…not in RegAlertResolution No. 368 dated 2024-0…not in RegAlertResolution BCB No. 85 —Cybersecurity Policy and Requ…2021-04-08 · this documentNormative Instruction BCB No. 3…2022BCB Resolution No. 538 — Amends…2025BCB Resolution No. 552 of March…2026Central Bank of Brazil Normativ…2026Normative Instruction BCB No. 5…2025Central Bank of Brazil Instruct…2025
amendssupersedesissued underrefers toproposed or not in RegAlertarrows run from the older text to the one that changes it

Timeline

Amended 2 times · last 2026-03-03

Source: Banco Central do Brasil — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works

More like this from BCB

BCB published 15 documents in the last 30 days. We email you each new one the day it's published.

Topics
infosec