Security Knowledge Base

Regulation on requirements for the management system of a provider of financial payment services (NBU Board Resolution 10.10.2024 No. 123). Applies to payment institutions (except small), e-money institutions, postal operators with the right to provide financial payment services, and branches of foreign payment/e-money institutions. 

Regulation on the organization of ensuring uninterrupted functioning during a special period of the banking system of Ukraine, activity of non-bank financial institutions and other persons under NBU supervision (NBU Board Resolution 14.06.2024 No. 67).

Regulation on the organization of measures to ensure information security in the banking system of Ukraine (NBU Board Resolution 28.09.2017 No. 95). Applies to banks; Section III also to non-bank participants of NBU information systems. 

Regulation on the organization of measures to ensure information security and cyber protection by financial service providers (NBU Board Resolution 09.12.2025 No. 143). Applies to insurers, credit unions, financial companies, and pawnshops. Covers governance, risk management, access control, MFA, logging, network protection, incident management, and third parties.