The Central Bank of Uzbekistan plans to introduce a new system next year to assess the maturity levels and cyber risks of financial organisations.
According to a Trend special correspondent, this was announced by Mirzabek Bobozhanov, head of the CERT-CBU division at the Central Bank of Uzbekistan’s Cybersecurity Centre, whilst speaking at the Silk Road Finance & Technology Forum in Tashkent.
According to him, the new system will differ from existing regulatory requirements and will enable the Central Bank to assess financial organisations taking into account their individual levels of cyber risk and maturity. “We have developed a new cybersecurity system, which we will launch and implement next year. It will be completely different from regulatory requirements,” said Bobozhanov.
He noted that the new system will provide for four levels of cybersecurity maturity. “A systemically important bank will have to comply with the most stringent requirements. A bank with fewer customers and one that is not as digitised will be subject to a lower level of requirements,” he explained.
According to Bobozhanov, this approach will allow the regulator to focus its resources on organisations with the most significant cyber and fraud risks. “We cannot cover all organisations and audit each one. Therefore, our approach will be more focused on risk level and maturity,” he noted.
