TajikistanMinimum Requirements for the Software and Hardware Support of Credit Financial Organizations, Information Security Requirements
Minimum Requirements for the Software and Hardware Support of Credit Financial Organizations approved by Resolution No. 121 of the Board of the National Bank of Tajikistan of (Ministry of Justice registration No. 1203)
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2025. Publisher's page: https://nbt.tj/upload/iblock/50b/94w0n37gvk9owhgm6ckgtp4a3oaf0rtk/NBT_Тalabot_RUS_0212022_Final.pdfIn force.
A sector security regimes rule binding private bodies.
- Private right of action
- No
- Instrument type
- a regulation made under an act
- Obligation class
- Security, Governance
As of .
What it requires
- This binds credit financial organizations supervised by the National Bank of Tajikistan, for the software, hardware and information systems they use (reached by declaring that you provide financial services).
- Have your management approve an information security strategy that covers at least the cyber-threat environment, the approach to managing and monitoring information security risks and cyber threats, and the principles for implementing cyber-security measures, and review it at least once every two years (items 4 and 6).
- Set your information security policy and strategy in internal acts that meet these Requirements (items 7 to 10).
- Give remote access to your network and key systems only where needed and at set times, and secure it with strong identification, authentication and encryption (items 42 to 47).
- Protect mail servers and e-mail systems with content and spam filtering, a system for detecting, blocking and reporting data breaches, firewalls and antivirus programs (item 57).
- Check each remote banking application for cyber and information security before it reaches clients, and record the result in a special act (item 89).
- See that every employee completes security, confidentiality and information-protection training and signs the information-protection documents (item 99).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Enforcement body
The National Bank of Tajikistan, which applies prompt corrective measures or enforcement measures under Article 48 of the Law on the National Bank of Tajikistan for non-compliance (item 100).
Settledness
- As of
- Open questions
- Which version of the Requirements is current, and has the National Bank issued amendments since the registration in November 2022?
What this law does
The Minimum Requirements for the Software and Hardware Support of Credit Financial Organizations were approved by Resolution number 121 of the Board of the National Bank of Tajikistan on and registered by the Ministry of Justice on under number 1203.
The Requirements state that they were developed under part 5 of Article 42 of the Law on the National Bank of Tajikistan to secure the necessary level of information security in the banking system and protection against the risk of cyber attacks.
Item 4 requires management of the credit financial organization to approve an information security strategy covering the cyber-threat environment, the approach to managing and monitoring information security risks and cyber threats, and the principles for implementing cyber-security measures. Item 6 requires the strategy to be reviewed at least once every two years.
Item 89 requires a remote banking application to be checked for cyber and information security before it is handed to clients, with the result recorded in a special act. Item 100 provides that for non-compliance the National Bank will apply prompt corrective measures or enforcement measures under Article 48 of the Law on the National Bank of Tajikistan. The National Bank of Tajikistan lists the Minimum Requirements among its normative legal acts on its website.
When LexLint raises it
When your app profile says your app provides financial services.