Article 13-6. Powers in the field of ensuring information security of financial organizations of the Law on State Regulation, Control and Supervision of the Financial Market and Financial Organizations

Home / RLA / Article 13-6. Powers in the field of ensuring information security of financial organizations of the Law on State Regulation, Control and Supervision of the Financial Market and Financial Organizations

Article 13-6. Powers in the field of ensuring information security of financial organizations of the Law on State Regulation, Control and Supervision of the Financial Market and Financial Organizations

In order to ensure the information security of financial organizations, the authorized body in the relevant areas:

1) approves the procedure for assessing the level of protection against information security threats;

IZPI's note! The first part of Article 13-6 is provided to be supplemented by subparagraph 1-1) in accordance with the Law of the Republic of Kazakhstan dated 30.06.2025 No. 205-VIII (effective sixty calendar days after the date of its first official publication).

1-1) adopt regulatory legal acts binding on financial organizations in the field of regulating the activities of financial organizations to ensure information security in accordance with the goals and objectives provided for in paragraphs 1 and 3 of Article 3 of this Law and the legislation of the Republic of Kazakhstan. The list of subordinate regulatory legal acts is defined in the regulation on the authorized body.;

2) approves the methodology for assessing information security risks, including the procedure for ranking financial organizations according to the degree of exposure to information security risks;

3) approves the requirements for the competencies of managers and employees of information security departments, including requirements for advanced training of persons responsible for ensuring information security;

4) approves requirements for information security incident response services, conducting internal investigations of information security incidents;

5) performs other functions and powers provided for by this Law, other laws of the Republic of Kazakhstan and acts of the President of the Republic of Kazakhstan.

The requirements of this article apply to branches of non–resident banks of the Republic of Kazakhstan, branches of non–resident insurance (reinsurance) organizations of the Republic of Kazakhstan, branches of non–resident insurance brokers of the Republic of Kazakhstan.

The Law of the Republic of Kazakhstan dated July 4, 2003 No. 474-II.

This Law regulates public relations related to the implementation of state regulation, control and supervision of the financial market and financial organizations, and is aimed at increasing the stability of the financial system of the Republic of Kazakhstan and creating conditions to prevent violations of the rights and legitimate interests of consumers of financial services.

President

Republic of Kazakhstan

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases