[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-253869-105":53,"doc-detail-253869-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","risk-based-cybersecurity-framework-and-guidelines-for-deposit-money-banks-and-payment-service-providers-letter-to-all-banks-and-payment-service-providers","Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks and Payment Service Providers - Letter to All Banks and Payment Service Providers","","Official guidance issuing a risk-based cybersecurity framework for Deposit Money Banks (DMBs) and Payment Service Providers (PSPs), setting minimum baseline requirements for cybersecurity programmes. Establishes an effective compliance date of January 1, 2019. Emphasizes confidentiality, integrity and availability of information, resilience against threats such as ransomware, targeted phishing and Advanced Persistent Threats, and the need to integrate cybersecurity into business objectives and overall risk management. Covers governance, risk management, operational resilience, metrics, monitoring, reporting, and regulatory compliance, including multiple appendices.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":41,"@type":70,"position":76},"https://docshare.wps.com/template/letters/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/risk-based-cybersecurity-framework-and-guidelines-for-deposit-money-banks-and-payment-service-providers-letter-to-all-banks-and-payment-service-providers/253869/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/risk-based-cybersecurity-framework-and-guidelines-for-deposit-money-banks-and-payment-service-providers-letter-to-all-banks-and-payment-service-providers/253869.png","ImageObject",442,249,{"name":88,"@type":89},"McGucket","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-18","2026-09-13",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",6,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What does the framework require for DMBs and PSPs?","Question",{"text":109,"@type":110},"It sets minimum cybersecurity baseline requirements to be implemented within DMBs’ and PSPs’ cybersecurity programmes, using a risk-based approach.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"When is full compliance with the guidelines required?",{"text":114,"@type":110},"Full compliance is required by January 1, 2019, on or before that date for all DMBs and PSPs.",{"name":116,"@type":107,"acceptedAnswer":117},"How should a cybersecurity programme be integrated into the organizations?",{"text":118,"@type":110},"It must be fully integrated into business goals and objectives and must be an integral part of overall risk management processes.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},253869,1791546684,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":40,"category_name":41,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":142},1236954412713,"https://us-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","BSD/DIR/GEN/LAB/11/25  \nOctober 10, 2018  \nLETTER TO ALL BANKS AND PAYMENT SERVICE PROVIDERS  \nISSUANCE OF RISK-BASED CYBERSECURITY FRAMEWORK AND GUIDELINES FOR DEPOSIT MONEY BANKS AND PAYMENT SERVICE PROVIDERS  \nThe CBN hereby issues the attached Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks (DMBs) and Payment Service Providers (PSPs) , which represents the minimum requirements to be put in place by all DMBs in their respective cybersecurity programmes.  \nThe effective date for full compliance with the provisions of the guidelines is January 1, 2019 and all DMBs and PSPs are expected to do so, on or before that date.  \nPlease, be guided accordingly.  \nYours faithfully,  \nAHMAD ABDULLAHI  \nDIRECTOR, BANKING SUPERVISION  \nRISK-BASED CYBERSECURITY FRAMEWORK AND GUIDELINES  \nFOR  \nDEPOSIT MONEY BANKS AND  \nPAYMENT SERVICE PROVIDERS  \nOCTOBER 2018  \nTable of Contents  \n1. Introduction ........................................................................................................................................... 1  \n2. Cybersecurity Governance and Oversight ............................................................................................... 3  \n3. Cybersecurity Risk Management System................................................................................................ 8  \n4. Cybersecurity Operational Resilience ................................................................................................... 11  \n5. Metrics, Monitoring & Reporting ......................................................................................................... 13  \n6. Compliance with Statutory and Regulatory Requirements .................................................................... 14  \nAppendix I: Critical Systems and Cyber-Incidents ....................................................................................... 15  \nAppendix II: Cybersecurity Self-Assessment Tools ...................................................................................... 16  \nAppendix III: Know Your Environment: ....................................................................................................... 17  \nAppendix IV: Enhancing Cybersecurity Resilience ....................................................................................... 22  \nAppendix V: Informative References ............................................................................................................ 34  \nAppendix VI: Cyber-Threat Intelligent Sources ............................................................................................ 35  \nAppendix VII: Reporting Templates ............................................................................................................. 38  \nAcronyms....................................................................................................................................................... 1  \nGlossary ........................................................................................................................................................ 2  \n1. Introduction  \nThe safety and soundness of Deposit Money Banks (DMBs) and Payment Service Providers (PSPs) require that they operate in a safe and secure environment. Hence, the platform on which information is processed and transmitted should be managed in a way that ensures the confidentiality, integrity and availability of information as well as the avoidance of financial loss and reputation risk, amongst others.  \nIn recent times, cybersecurity threats have increased in number and sophistication as DMBs and PSPs, use information technology to expedite the flow of funds among entities. In this regard, threats such as ransomware, targeted phishing attacks and Advanced Persistent Threats (APT), have become prevalent; demanding that DMBs and PSPs remain resilient and take proactive steps to secure their critical information assets including customer information that are ac","cbCaij6vhOdag0nU","https://ap.wps.com/l/cbCaij6vhOdag0nU","pdf",1064326,65,"English","# Table of Contents\n## Introduction\n## Cybersecurity Governance and Oversight\n## Cybersecurity Risk Management System\n## Cybersecurity Operational Resilience\n## Metrics, Monitoring & Reporting\n## Compliance with Statutory and Regulatory Requirements\n## Appendix I: Critical Systems and Cyber-Incidents\n## Appendix II: Cybersecurity Self-Assessment Tools\n## Appendix VII: Reporting Templates","[{\"question\":\"What does the framework require for DMBs and PSPs?\",\"answer\":\"It sets minimum cybersecurity baseline requirements to be implemented within DMBs’ and PSPs’ cybersecurity programmes, using a risk-based approach.\"},{\"question\":\"When is full compliance with the guidelines required?\",\"answer\":\"Full compliance is required by January 1, 2019, on or before that date for all DMBs and PSPs.\"},{\"question\":\"How should a cybersecurity programme be integrated into the organizations?\",\"answer\":\"It must be fully integrated into business goals and objectives and must be an integral part of overall risk management processes.\"}]","Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks and Payment Service Providers - Letter to All Banks and Payment Service Providers | PDF",1789271275,23]