Reference
The document has been submitted by the Ministry of Finance.
In accordance with the federal law On the National Payment System (Clause 2, Part 13, Article 22), the Central Bank of Russia, upon agreement with the Government, has established the following requirements for information technologies used by payment infrastructure service providers to acknowledge the payment system as nationally important:
- developers (rightholders) of at least 25 per cent of the software applications that are used by payment infrastructure service providers and provide for the work of the operational centre and payment-clearing centre, software tools that secure the protection of the information, and payment card software tools, are Russian organisations;
- licence agreements will grant payment infrastructure service providers the right to use the above software tools for at least five years, and stipulate updates of their versions;
- the physical credit card shall be compliant with the requirements for certain standards;
- the encryption protection module used in the payment card’s electronic chip shall have a certain certificate of compliance with security standards;
- payment cards shall be manufactured (assembled) by Russian organisations on Russian territory;
- the value of the qualitative assessment for securing requirements for information protection during money transfers by information technologies used by payment infrastructure service providers should be not lower than satisfactory.
The resolution will allow the Central Bank of Russia to increase the security of money transfers on the territory of the Russian Federation.