Supplementing Decision No. 103-N on Minimum Requirements for the Internal Control System of an Insurance Company

• Publications
• Board-decisions

On supplementing decision No. 103-N of the Board of the Central Bank of the Republic of Armenia dated 16 April 2013

2026-01-30

The Board of the Central Bank of the Republic of Armenia

Decision

30 January 2026 No. 22-N

On supplementing decision No. 103-N of the Board of the Central Bank of the Republic of Armenia dated 16 April 2013

Publication date:11.02.2026

With the aim of ensuring the availability of an appropriate set of tools aimed at the effective management of the risk of circumvention of international sanctions in the insurance system of the Republic of Armenia, based on Article 153 of the Law “On Insurance and Insurance Activities,” guided by Article 2(3) and point “5” of Part 1 of Article 20 of the Law “On the Central Bank of Armenia,” Part 3 of Article 33 and Article 34 of the Law “On Normative Legal Acts,” the Board of the Central Bank of the Republic of Armenia

RESOLVES :

1. To make the following supplements to Regulation 3/10 “Minimum Requirements for the Internal Control System of an Insurance Company,” approved by Decision No. 103-N of the Board of the Central Bank of the Republic of Armenia dated 16 April 2013 “On Approving Regulation 3/10 “Minimum Requirements for the Internal Control System of an Insurance Company,” and on Declaring Invalid Decision No. 163-N of the Board of the Central Bank of the Republic of Armenia dated 2 June 2009” (hereinafter referred to as the Regulation):

1. In point 3 of the Regulation:
   a . to replace the punctuation mark “.” at the end of sub-point 13 with a “,” mark, b. to supplement it with new sub-points 14 and 15, worded as follows:
   “14) International sanctions: any economic, financial, trade or other restrictive measures applied by international organizations or states, including the freezing or blocking of property, restrictions on access to funds or economic resources, sectoral financing or investment restrictions, trade, export or import controls, prohibitions on services, and measures aimed at combating the circumvention of the aforementioned restrictions, with the exception of the lists of persons related to terrorism or the proliferation of weapons of mass destruction established by the Law “On Combating Money Laundering and Terrorism Financing,” in respect of which the relevant regulations are established by other relevant laws and secondary regulatory legal acts,

2. Risk of circumvention of international sanctions: the probability of the Company incurring losses as a result of the circumvention of international sanctions.”:

3. To supplement the Regulation with a new Chapter 13.1, worded as follows:

“CHAPTER 13.1 MANAGEMENT OF THE RISK OF CIRCUMVENTION OF INTERNATIONAL SANCTIONS

85.1. The Company shall have risk-based internal control systems and procedures for managing the risk of circumvention of international sanctions, which shall include, at a minimum, mechanisms for the assessment of risks related to the circumvention of international sanctions, as well as for their mitigation, monitoring, testing of the control system, and accountability.
85.2. Depending on its business activity, scale, complexity and risk exposure, the Company shall follow only those regulations on international sanctions established by countries or international organizations that may, directly or indirectly, have an impact on the Company’s activity.
85.3. The Company shall have such internal control system processes as will make it possible to fully and effectively detect, assess, suspend or reject transactions bearing the risk of circumvention of international sanctions.
85.4. The Board of the Company shall:

1. approve the procedures for internal control and screening related to the management of the risk of circumvention of international sanctions, and review them at least annually, or more frequently in the event of material changes occurring at the Company or in the market,

2. approve the action plan aimed at remedying the deficiencies, failures and omissions of the process of managing the risk of circumvention of international sanctions, as set forth in sub-point 2 of point 85.18 of this Regulation, and review it at least annually, or more frequently in the event of material changes occurring in the process of managing the risk of circumvention of sanctions,

3. approve the budget necessary for carrying out the process of managing the risk of circumvention of international sanctions.
   85.5. The executive body of the Company shall:

4. ensure the implementation of the requirements set forth in point 85.1 of this Regulation and their effective execution,

5. define the duties and scope of responsibility of the person responsible for carrying out the function of managing the risk of circumvention of international sanctions (hereinafter also referred to, for the purposes of this Chapter, as the Responsible Person), appoint the Responsible Person, who shall be an executive already registered with the Central Bank, as well as, where necessary, other persons responsible for managing the risk of circumvention of international sanctions, while excluding the likelihood of a conflict of interest,

6. ensure the performance of the day-to-day work for the purpose of managing the risk of circumvention of international sanctions and the availability of sufficient technological, expert and other resources,

7. ensure the implementation of the action plan aimed at remedying the deficiencies, failures and omissions of the process of managing the risk of circumvention of international sanctions, as set forth in sub-point 2 of point 85.18 of this Regulation.
   85.6. The Responsible Person shall, at a minimum:

8. develop the methodologies and procedures for managing the risk of circumvention of international sanctions and submit them for approval by the Board,

9. identify and assess the risks related to the circumvention of international sanctions by the Company, exercise control and monitoring over the identified risk of circumvention of international sanctions, and ensure its effective management,

10. develop the action plan aimed at remedying the deficiencies, omissions and failures of the process of managing the risk of circumvention of international sanctions,

11. perform other functions related to the management of risks of circumvention of international sanctions.
    85.7. The Company shall have a methodology for assessing the risks of circumvention of international sanctions and, on the basis thereof, shall carry out an assessment of the risk of circumvention of international sanctions at least once a year, with a view to identifying possible deficiencies and problems.
    85.8. The assessment of the risk of circumvention of international sanctions shall include an assessment of the inherent risk, its management, and the residual risk.
    85.9. In the process of assessing the risk of circumvention of international sanctions, the assessment of the inherent risk shall, at a minimum, include:

12. assessment of customer risk,

13. assessment of geographic location risk,

14. assessment of the risk of the services offered, including transactions,

15. assessment of the risk of counterparties and intermediaries,

16. assessment of the risk of the service delivery chain.
    85.10. The Company shall assess the relevant set of tools aimed at mitigating the inherent risks forming part of the process of managing the risk of circumvention of international sanctions, and the effectiveness of their application.
    85.11. The Company shall assess the residual risk of circumvention of international sanctions, which is determined as a result of assessing the level of inherent risk of the Company’s operations and the adequacy and effectiveness of its management.
    85.12. Problems and deficiencies identified in other control processes, such as monitoring, testing and internal audit, shall also be included in the results of the assessment of the risk of circumvention of international sanctions.
    85.13. The Company’s internal control systems and processes shall, at a minimum, make it possible to:

17. carry out proper due diligence of the Company’s customer, the customer’s counterparties and the Company’s counterparties, as well as all parties to transactions,

18. carry out an assessment of the risk of circumvention of international sanctions by customers and counterparties (including reinsurers),

19. carry out screening of transactions,

20. monitor the activity of customers and counterparties on the basis of information available to the Company,

21. assess the process of assessing the risk of circumvention of international sanctions,

22. collect and retain information identified in the process of managing the risk of circumvention of international sanctions.
    85.14. The Company shall ensure that the relevant employees involved in operations related to the management of the risk of circumvention of international sanctions are informed of the procedures for managing the risk of circumvention of international sanctions implemented at the Company and of updates thereto.
    85.15. The Company shall have a process for monitoring the effectiveness of the process of managing the risk of circumvention of international sanctions.
    85.16. The Company shall carry out testing of the control and key processes of the process of managing the risk of circumvention of international sanctions, by means of which it shall, at a minimum, verify that the screening systems are functioning properly, and shall also periodically assess their effectiveness from the standpoint of risk management.
    85.17. The Company shall ensure that, in the event problems are identified in the internal control systems aimed at managing the risk of circumvention of international sanctions, it is possible to take prompt and effective action aimed at mitigating and remedying the risk.
    85.18. At least on a semi-annual basis, the Responsible Person shall submit to the Board and the executive body reports on, at a minimum, the following:

23. the process of managing the risk of circumvention of international sanctions, its components, the progress of its implementation, and all risks relating to the circumvention of international sanctions,

24. the identified deficiencies, failures and omissions of the process of managing the risk of circumvention of international sanctions,

25. the results of the assessment of the risk of circumvention of international sanctions,

26. possible violations of regulations on international sanctions, as well as measures aimed at remedying them.
    85.19. The Company shall have appropriate procedures that shall make it possible for cases of deficiencies, failures and omissions identified in the internal control system relating to the management of the risk of circumvention of international sanctions to be promptly reported to the Responsible Person, and for effective measures aimed at mitigating and remedying the risk of circumvention of international sanctions to be taken.
    85.20. The Company shall have procedures and automated tools implemented for the screening of international sanctions, commensurate with its size, complexity, risk exposure and current operations, which shall make it possible to carry out a detailed examination of the Company’s operations, including transactions, for the purpose of identifying and effectively managing the risks of circumvention of international sanctions. The procedures set forth in this point shall be reviewed on an annual basis or in the event of a material change occurring at the Company or in the market.
    85.21. The Company, taking into account the particularities of the regulations on international sanctions, shall, in the screening process, take into account, at a minimum:

27. geographic factors, including countries, cities, regions that are subject to the strictest and most extensive regulation of international sanctions,

28. the main keywords related to international sanctions,

29. the sources of origin of the goods, services, software and technologies forming part of the transaction,

30. organizations and entities belonging to, or interconnected with, parties subject to international sanctions, which are suspected of circumventing international sanctions. Moreover, the Company may, as necessary, also take into account reliable internal and external data or information concerning the latter,

31. the identification data of the financial institutions to which the international sanctions apply.
    85.22. The Company shall, at a minimum, screen:

32. customers and counterparties,

33. the Company’s participants, employees involved in the execution of transactions, or the Company’s management bodies, at least on an annual basis,

34. the currencies of transactions,

35. the place where the operations are carried out.
    85.23. When carrying out the screening of customer data set forth in this Chapter, the Company shall, at a minimum, take into account persons interconnected with the person concerned who have already been identified by the Company, including persons with direct and indirect significant participation, beneficial owners, directors, authorized persons, guarantors, the customer’s business relationships, and, in the case of natural persons, also the citizenship, actual place of residence and main country of taxation, and in the case of legal persons, the place of location and activity.
    85.24. Where services are regularly rendered to financial institutions operating outside the territory of the Republic of Armenia or falling outside the scope of this regulation, the Company shall continuously assess and document the process of managing the risk of circumvention of international sanctions of the financial institution concerned.
    85.25. The screening of customer data set forth in this Chapter shall be carried out when establishing a business relationship with the customer and shall be continuous in nature. Moreover, in the event of any change or update in the international sanctions lists or in the customer’s data, the Company shall carry out screening within 1 business day following the change or update.
    85.26. Data on transactions carried out by the Company shall be subject to screening prior to the execution and confirmation of the transaction.
    85.27. The Company shall periodically test the effectiveness of the international sanctions screening tools and systems, which shall, at a minimum:

36. be carried out on the basis of the criteria established by the Company for screening, the analyses performed, and the reports,

37. include verification of the reliability and completeness of the data on the management of the risk of circumvention of international sanctions.
    85.28. The Company shall document the international sanctions screening tools, and shall also ensure the transparency of the system’s limitations or risk-based decisions that are not detected by the screening control mechanisms.
    85.29. In addition to the control mechanisms for screening international sanctions, the Company shall also implement an appropriate methodology, including transaction monitoring scenarios, to detect cases of evasion or circumvention of international sanctions. The scenarios shall be reviewed and assessed periodically to ensure that the methodology remains adequate for cases of evasion or circumvention of international sanctions.”:

38. In point 125 of the Regulation:
    a. to replace the punctuation mark “.” at the end of sub-point 16 with a “,” mark, b. to supplement it with a new sub-point 17, worded as follows:
    “17) assessment of the effectiveness of the management of the risk of circumvention of international sanctions.”:

2. This Decision shall enter into force 6 months after the day of its official publication.

Deputy Chairman of the Central Bank of the Republic of Armenia Armen Nurbekyan Yerevan