Requirements for the development and organization

[relemedf5w023]

It should be noted that in Russian regulations (except for harmonized standards), the formal implementation of the requirement to have an awareness-raising program is either advisory in nature or implicit. Thus, the decision to apply the standards of the Bank of Russia STO BR is made by each financial institution independently. In particular, these requirements are disclosed in subsection 8.

The implementation of training and awareness-raising spain whatsapp data in the field of information security" STO BR IBBS-1.0-2014 "Ensuring information security of organizations of the banking system of the Russian Federation. General Provisions". However, it should be noted that the Central Bank of the Russian Federation has repeatedly announced its plans to transform the status of STO BR into the category of mandatory documents in the form of GOST. Thus, the requirements for raising awareness may become mandatory for all financial institutions of the Russian Federation.

The current versions of the orders of the FSTEC of Russia on the protection of information in state information systems (dated February 11, 2013, No. 17) and personal data information systems (dated February 18, 2013, No. 21) do not have requirements for raising awareness of employees. Article 18.1 of Federal Law No. 152 "On Personal Data" classifies training and familiarization of employees of the personal data operator with the requirements for the protection of personal data as one of the possible, private measures.