NicaraguaTechnology Risk Management Norm, Security and Controls of Supervised Financial Institutions
Norma sobre Gestión de Riesgo Tecnológico, Resolución CD-SIBOIF-500-1-SEP19-2007, arts. 2 y 3
In force.
A sector security regimes rule binding private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Security, Governance
As of .
What it requires
- This binds the banks and the non-bank financial institutions subject to the authorization, supervision and oversight of the Superintendencia de Bancos y de Otras Instituciones Financieras, to the extent that the norm applies to them (reached by declaring that you provide financial services).
- Apply the norm's minimum criteria to the management of the risks, the security, the use and the controls of your information technology (article 2).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Enforcement body
The Superintendencia de Bancos y de Otras Instituciones Financieras, which authorizes, supervises and oversees the institutions the norm covers (article 3).
Settledness
- As of
- Open questions
- Which penalty applies to a supervised institution that breaches the technology risk norm?
What this law does
Article 2 sets the minimum criteria for evaluating the management of the risks, the security, the use and the controls applied to the information technology of the supervised entities. Article 3 applies the norm to all the financial institutions subject to the authorization, supervision and oversight of the Superintendencia de Bancos.
The preamble records that the Consejo Directivo of the Superintendencia issued the norm under article 3 and article 10 of Ley 316 and articles 40 and 134 of Ley 561. Article 44 repeals the earlier technology risk norm, Resolución CD-SIBOIF-437-1-AGOS14-2006.
When LexLint raises it
When your app profile says your app provides financial services.