CBN Passes BSI Test on Information Security Standard Compliance

Central Bank of Nigeria (CBN) has maintained the highest level in information Security Standard (ISO27001) compliance since being certified in July, 2013.

This was disclosed by Vikas Mulkutkar, Surveillance Auditor of the British Standards Institute (BSI), during the closing ceremony of the ISO 27001 surveillance audit at the Bank’s headquarters in Abuja.

Mr. Mulkutkar, who commended the staff of the Central Bank of Nigeria for their work culture and commitment to the Information Security Management System,

noted that the auditors checked all of the information security controls and found them to be in strict compliance and handled by very committed staff.

Speaking further, he said that the 11 departments audited showed high knowledge of information systems security controls and had complied with the ISO 27001 standard exhibiting minimal deviation.

He, however, urged the Management of the Bank to consider upgrading from the ISO27001:2005 to the current version (ISO27001:2013) of the standard and also engage other system certificati ons like the Business Continuity Management (BCM) standard and Service Management Standard to ensure an all-round certification for the Bank.

In his response Mr. Godwin Emefiele, CBN governor, represented by Dr. Kingsley Moghalu, deputy governor (Operations),  congratulated staff of the Bank for maintaining the highest global information security standard from BSI.

He attributed the feat to the high level of professionalism and commitment exhibited by the ISO Champions and entire staff of the Bank.

According to him, the first surveillance audit, which was conducted in the Bank between June 5 and 10, 2014, was to review the CBN Information Security Management System (ISMS) processes, procedures, documents and records.

Continuing, he said sample departments were selected from the five Directorates of the Bank, where departmental processes and business areas were checked for compliance with the standard, including improvements to the Bank’s ISMS since the certification of CBN in July, 2013.

The Governor, therefore, urged staff of the Bank to work harder in order to achieve zero non-conformity standards.

The Management of the Bank, thereafter, presented awards to the ISO Champions in the various departments of the Bank and the Secretariat of Information Security Management System for the successes achieved at the end of the surveillance audit.

It will be recalled that the CBN in July, 2013 became the first regulatory body in Nigeria to obtain the ISO: 27001: 2005 Certificate from the British Standards Institute (BSI).