Analysis of the new central bank of the russia requirements for operational risk management to ensure information security.

Author(s):  
O.E. Borovskaya ◽  
◽  
S.L. Larionova

On October 1, 2020, the new Regulation of the Central Bank of the Russian Federation No. 716-P “On requirements for the Operational risk Management System in a Credit institution and a banking group” came into force. The article is devoted to the analysis of the requirements of the regulation that must be taken into account before January 1, 2022 within the information security management system in connection with the use of a risk-oriented approach to the allocation of resources of a financial organization.

2009 ◽  
Vol 1 (2) ◽  
pp. 45-60 ◽  
Author(s):  
Janusz Zawiła-Niedźwiecki ◽  
Maciej Byczkowski

Information Security Aspect of Operational Risk ManagementImproving organization means on the one hand searching for adequate product (service) matched to the market, on the other hand shaping the ability to react on risks caused by that activity. The second should consist of identifying and estimating types of risk, and consequently creating solutions securing from possible forms of it's realization (disturbances), following rules of rational choice of security measures as seen in their relation to costs and effectiveness. Activities of creating the security measures should be organized as constantly developing and perfecting and as such they need formal place in organizational structure and rules of management


2020 ◽  
Vol 23 (6) ◽  
pp. 99-114
Author(s):  
B. S. Dongak ◽  
A. S. Shatohin ◽  
R. V. Meshcheryakov

Purpose of research. The purpose of this study is to assess the possibility of applying the methodology for centralized management of systems and information risks using the example of informatization of public departments of Republic of Tyva in order to optimize the cost of purchasing technical, software and hardware-software means of protecting information, as well as the payroll of maintenance technical personnel.Methods. One of the main research methods is the creation of an experimental model of the mechanism of a single information and computing network, combining various government departments located within the same administrative building, which allows working simultaneously with distributed or centralized applications, databases and other services, as well as centralized information risk management security. The next research method is the analysis and study of the principle of operation of information resources, information systems, databases, and the increase in the number of domain users if they are combined into a single data transfer network. The interaction and effectiveness of personnel, a specialized unit based on one government agency, ensuring the regular functioning of the network and the necessary level of information security for all government departments.Results. As a result, an economic effect is achieved by eliminating the acquisition of duplicate software and hardware information protection, increasing the efficiency of using unified information services, and creating a centralized structural unit that uses risk management tools and makes information security management decisions based on the principles of system analysis , structuring method and expert survey methods. The results of the study have been used in solving problems of improving the information security management system of the authorities of Republic of Tyva.Conclusion. We have developed the original information technology architecture of the information security management system and centralized use of information technologies for the government of Republic of Tyva. The distinctive features of the structure of software tools for the centralized approach are the multi-agent implementation of the control elements of the decision support system and the integration of various types of security management models into a single complex. 


2018 ◽  
Vol 7 (4.36) ◽  
pp. 524
Author(s):  
I. I.Vasiliev ◽  
P. A. Smelov ◽  
N. V. Klimovskih ◽  
M. G. Shevashkevich ◽  
E. N. Donskaya

The existing financial and economic situation in the world and in Russia impacts the activities of all sectors of the economy, including posing challenges for banks. In the conditions of prolonged instability, the banking community has to pay great attention to the risks taken and to manage them. Among all the risks that the bank is exposed to, operational risks represent a separate group due to its specifics, a lack of a systematic approach to analysis and a lack of identification criteria requiring more detailed study. The operational risk is unique in that, although it affects virtually all areas of the credit institution, it is difficult to establish and separate it from other bank risks. It should be noted that every year there appear all new types of operational risk that have a strong impact on the activities of the credit institution due to the development of information and computer systems, the complication of the instruments of the stock market and the improvement of business methods. Therefore, regulators of all countries try to constantly improve the regulatory framework related to the management of the operational risk of a commercial bank, based on the recommendations given by the Basel Committee on Banking Supervision.The article is aimed at developing an effective system for managing the operational risk of a commercial bank.The empirical level research methods used in this article are a description of what operational risk is, its types, tools and methods of assessment; comparison of operational risk management systems in the studied banks; generalization, analysis and synthesis of the information received; the hypothetical-deductive method is used at the theoretical level.Modernization and improvement of the operational risk management system helps stabilize the bank, increase stability and increase profitability, reduce the provision of capital for operational risk, and increase the attractiveness of banking services for consumers, thus benefiting a credit institution among competitors. In today's financial environment, the effective operational risk management is inherent in the long-term development strategy. 


2017 ◽  
Vol 6 (1) ◽  
pp. 29-53 ◽  
Author(s):  
Radoica Luburić

Abstract This paper is the result of the author`s many years of multidisciplinary research in the areas of quality management and operational risk management. The main focus of the research is aimed at strengthening the model of the “three lines of defence” in terms of more efficient management of operational risks - those that arise as a result of inadequate and unsuccessful processes and systems, human factors, as well as those that can appear as a result of external events. The strengthening of the three lines of defence model is brought about through the synergy of quality management principles, the principles of risk management, and the total quality management approach. In essence, the term strengthening may be interpreted as a process of continual improvement. Business operations based on the principles of quality management and risk management allow central banks to be able to continuously improve their overall business performance. The principles of quality management contain properly aligned and matched best solutions from current management theory and practice. Designed to work together - and this essentially means in a consistent, synchronized and synergistic manner, the principles are translated into a series of requirements and guidelines of international standards suitable for implementation. Through their synergy, the principles of quality management and risk management, as well as approaches to total quality management form a clear, applicable and sustainable paradigm of successful management of central banks. Incorporation of the principles of quality management in central bank systems and processes would significantly strengthen the three lines of defence, in terms of efficient operational risk management, which this paper aims to show in a clear and comprehensive manner. Although any central bank is a specific institution, all the principles of quality management and risk management can be applied to its operations. In addition to the numerous and highly significant benefits and synergistic effects that the application of quality management and risk management principles bring to central banks, what should also be highlighted is their impact on a new way of thinking regarding successful central bank governance, which generates a new attitude towards its responsibilities, objectives, employees, and the environment. A new way of thinking produces new behaviours and an improved business culture and can ensure the sustainable success of central banks and other financial system entities. Bearing in mind that the process of risk management is an integral part of the working of central banks, the most effective results are achieved when the “process owner” is also the “risk owner”. This paper shows that the integration of these two roles contributes to the full effectiveness and efficiency of the processes and risks management. It is clearly demonstrated that this unity of the roles, along with a quality culture, a risk culture, and risk-based thinking is embedded in all management processes - from defining policies, objectives, and plans, all the way to their operational implementation and that this ensures the fulfilment of requirements, needs, and expectations of customers and other relevant stakeholders. In all of this, the management of any central bank plays the most important role, not only because of the importance and complexity of the issues in question, but also because of their full responsibility to manage risks in a proper, effective, conscientious and dedicated manner, as that is the key precondition for achieving sustainable success.


2012 ◽  
Vol 10 (1) ◽  
pp. 137-147
Author(s):  
M.D. Gibson ◽  
Jacobus Young

Operational risk has become an increasingly important topic within financial institutions resulting in an increased spend on operational risk management solutions. While this is a positive approach, evidence has shown that information technology implementations have tended to have low rates of success. Research has highlighted that a series of defined critical success factors could reduce the risk of implementation failure. Twenty-nine critical success factors were identified by means of a literature review and confirmed by a questionnaire that was distributed to an identified target group within the South African financial services community. Reponses to the questionnaire revealed that 27 of the 29 critical success factors were deemed important and critical to the implementation of an operational risk management system.


2015 ◽  
Vol 809-810 ◽  
pp. 1522-1527 ◽  
Author(s):  
Nicolae Anton ◽  
Anișor Nedelcu

This work approaches the assessment of the security and information risks in order to find the optimal values of the risks by applying and comparing different methods to measure and assess the security risks. By describing structural characteristics of standards and methods implemented in the information security management system (ISMS), this paper underlines the necessity, means and effectiveness of information security modeling. The conclusions of this paper highlights the importance of standards and methods of risk management assessment.


Sign in / Sign up

Export Citation Format

Share Document