There are 3 months left until December 13, 2026. Will the nonbank financial sector have time to meet the NBU’s cybersecurity requirements?
That is when the transition period under NBU Resolution No. 143 ends. By that date, insurers, credit unions, financial companies, and pawnshops must bring their operations into compliance with the new information security and cybersecurity requirements.
The key change is that the focus has shifted from “implementing security measures” to “managing security.”
Information security should be an integral part of an organization's management system, rather than a separate IT function. What does this mean in practice:
A common mistake is to immediately look for a “solution tailored to Article 143.”
No single product covered by the Regulations is sufficient on its own. A combination of processes, documents, and several classes of technical equipment is required. Without understanding exactly where the gaps lie, you’ll end up buying either too much, or the wrong things.
Workflow:
This way, you get answers not only to the question “What should be implemented?”, but also to “Why specifically this?” and “How can compliance be demonstrated?”
Conformity assessment is the quickest step. Next come budget approval, procurement, implementation, and testing. And you know better than anyone how long these processes take in your organization.
Not sure to what extent your infrastructure meets the requirements of Resolution No. 143?
Sign up for a free consultation with experts from AM Integrator Group. We’ll help you assess your current situation, identify critical gaps, and develop a realistic plan for the remaining three months.
