meta_id 3253321

On June 12, 2026, the National Bank of Ukraine (NBU) Board adopted Resolution No. 66, which approves regulations on critical information infrastructure within the financial sector and amends certain NBU normative acts concerning cybersecurity. The resolution establishes a unified approach to organising the functioning of critical information infrastructure in Ukraine's financial sector. The regulation aims to standardise cybersecurity requirements and operational procedures across financial institutions that manage or depend on critical information systems. By implementing consistent standards, the NBU seeks to enhance the resilience and security of the financial system against cyber threats and operational disruptions. The regulation applies to financial institutions and entities operating critical information infrastructure components within the Ukrainian financial sector. This includes banks, payment service providers, and other financial market participants whose systems are classified as critical to financial stability and continuity of operations. The regulation addresses governance frameworks, security protocols, incident reporting requirements, and recovery procedures for critical information infrastructure. It establishes obligations for financial institutions to implement appropriate technical and organisational measures to protect critical systems, monitor for threats, and respond to incidents in a coordinated manner with the NBU. The regulation becomes effective on June 19, 2026. Financial institutions must ensure compliance with the new requirements by this date. The NBU will oversee implementation and may conduct assessments to verify that institutions have adopted the necessary measures to protect critical information infrastructure in accordance with the regulation.