NBU to inspect cyber security in 6 banks in 2026

The National Bank of Ukraine (NBU) will inspect cyber security in 6 banks in 2026.

This is stated in the NBU's message, Ukrainian News Agency reports.

In 2026, the National Bank of Ukraine plans to carry out inspections on information security, cyber security and the provision of qualified electronic trust services in six banks.

These are:

JSC KREDOBANK (EDRPOU 09807862) - in Q1;

JSC OTP BANK (EDRPOU 21685166) - in Q2;

JSC OXI BANK (EDRPOU 09306278) - in Q2;

JSC BANK CREDIT DNEPR (EDRPOU 14352406) - in Q3;

JSC BANK UKRAINIAN CAPITAL (EDRPOU 22868414) - in Q4;

JSC UKRSIBBANK (EDRPOU 09807750) - in Q4.

The inspections of the above banks are provided for by the Plan for conducting inspection inspections of banks for 2026 and will include, in particular, issues of information security and cyber protection.

The study of information security measures implemented by banks and the analysis of the effectiveness of information security management processes will be carried out by specialists of the National Bank directly in the banks.

The results of the inspections will contribute to the consistent strengthening of the capabilities of the banking system to ensure sustainable functioning in the face of current challenges and threats.

Planning of on-site inspections on information security, cyber protection and the provision of qualified electronic trust services is carried out on the basis of a risk-based approach specified in the Regulation on monitoring compliance banks of the requirements of the legislation on information security, cyber protection and electronic trust services.

Inspections will be carried out taking into account the information available to the National Bank about the facts, events and circumstances of the banks' work, taking into account the peculiarities of their functioning, the nature and scope of the provision of banking and financial services, and the implementation of other types of activities.

As Ukrainian News Agency earlier reported, inspections of compliance with the requirements of banking legislation in the field of electronic trust services will be carried out only with respect to banks - qualified providers of electronic trust services, information about which is included in the Trusted List upon submission by the certification center.

To request a correction, please send an email.