14.10 General Requirements and Reporting Processes
N 35/2018 STA
14.10.1The privilege to download software (licensed and not free or pirated software) must be given only to the designated IT person. Users of computers must not be allowed to download any software to computers;
14.10.2The “Auto-logout” feature must be activated for all applications related to the business of the Licensed Person when they are not in use;
14.10.3The “Auto-lock” feature must be available by using a screen saver password on all work stations or operating systems when they are not in use;
14.10.4Appropriate Firewall systems and protection must be available for PCs, Servers, Operating Systems, Database and network equipment;
14.10.5All the Operating systems, server machines, hardware equipment, system software, applications, utility programs, anti-virus programs must be licensed by the respective vendor at all times along with valid agreements;
14.10.6The Licensed Person must review all warning notices issued by the Central Bank on cyber threats and take necessary actions immediately to ensure adequate protection to its computer systems against such threats; and
14.10.7Cyber fraud/crime incidents must be immediately reported to the Banking Supervision Department and police authorities.
Book traversal links for 14.10 General Requirements and Reporting Processes