Regulatory Alerts2022-02-21 | NRP-32Added · Updated
Technical Standards on Cybersecurity Measures in Digital Channels
The Committee of Standards of the Central Reserve Bank of El Salvador issued CNBCR-02/2022, effective March 8, 2022, imposing cybersecurity obligations on banks, cooperative banks, savings and credit societies, and investment banks. The regulation mandates the implementation of multi-factor authentication, requiring at least three distinct factors for client identity verification in digital channels, including specific password length requirements. Entities must also deploy network monitoring, vulnerability management, encryption, and incident response plans to secure information systems and digital transactions.
Topics
Share