2020-04-14 | NRP-23Added · Updated
The Norms Committee of the Central Reserve Bank of El Salvador issued these standards to establish minimum criteria for information security and cybersecurity management. The document mandates compliance for a wide range of supervised entities, including banks, insurance companies, pension funds, and payment system operators. It requires these entities to implement an Information Security Management System, define specific roles for the Board of Directors and Senior Management, and maintain independent specialized security units.