Daily Times

KARACHI: State Bank of Pakistan has issued guidelines on prevention against cyber attacks. The SBP has advised banks/MFBs/DFIS to continuously improve their cyber security controls and procedures through these guidelines so as to anticipate, withstand, detect, and respond to cyber attacks. SBP’s cyber security instructions provide guidelines in the areas of risk ownership and management responsibility; periodic evaluation and monitoring of cyber security controls; regular independent assessment and tests, and industry collaboration and contingency planning. The new instructions require the board of directors (BoD) of the institutions to regularly evaluate the adequacy of cyber security systems and action plans with regard to emerging cyber threats. The senior management is required to ensure that an organisational plan of action for cyber security management exists in each institution and is regularly reviewed and updated for implementation. The cyber threats have become a global phenomenon and are continually growing in sophistication and impact, despite the advances in cyber-security technologies and practices. The SBP has always proactively strived to provide an enabling regulatory framework in order to cope with new threats. While the new technologies and their application in banking system has created new opportunities for the efficient and cost-effective delivery of services which have also posed a number of new threats and risks. The banks/DFIs/MFBs are required to make necessary arrangements to comply with the instructions latest by December 31, 2016.