The article is devoted to the legal regime of information owned by the National Bank of Ukraine. The content of the concept of information is disclosed and its types are defined. The legal basis for disclosure of information owned by the National Bank of Ukraine is investigated and the aspects of protection are analyzed. Information is any information and/or data that may be stored on a physical medium or displayed electronically. The legislation defines the following types: information about an individual; information of reference and encyclopedic nature; environmental information; product information (job, service); scientific and technical information; tax information; legal information; statistical information; sociological information; other types of information. Information owned by the NBU includes information about an individual, namely information or a set of information about an individual that is identified or can be specifically identified; information about the debtor of the bank (and/or related persons); on credit operations of banks and on the status of the fulfillment of obligations under such operations, analysis and classification of loans; information on
monetary and banking statistics; information on the ownership structure of banks and the composition of banking groups, bank executives.
The legal bases for disclosure of this information are defined in the Laws of Ukraine “On the National Bank of Ukraine”, “On Banks and Banking”, “On Access to Public Information”, Regulations on the Credit Registry of the National Bank of Ukraine, etc.
The regulation on the organization of information security measures in the banking system of Ukraine defines the following principles of information protection: the approach to information security should be systematic (comprehensive); the process of improvement and development of information security must be continuous and carried out by substantiation and implementation of rational means, methods, measures using the best international experience; safeguards against real and potential threats to the
information security of the bank should be timely and adequate; ensuring the proper level of information security of the bank is impossible without the support and control of the bank’s executives; sustainable development of information security systems is only possible if resources, including financial resources, are sufficient. The features of information protection in banking systems are set by the National Bank.
Keywords: the legal regime of information, information, open data, information with restricted access, information security, National Bank of Ukraine, credit register.
Threat modelling for creating technical information protection system at automated machine building plants
