Mitigation of Cyber Risks in the Field of Electronic Payments: Organizational and Legal Measures

Abstract

The issues of ensuring the electronic payments’ security are currently in the limelight of participants in the monetary system and the scientific expert community. The goal of this paper is to develop organizational and legal measures aimed at improving the security of electronic payments in the Russian Federation.
 Research methods include the analysis of retrospective data describing the development of the payment system and electronic payments using bank cards, as well as the method of statistical observations and analysis of secondary data from surveys of Russian and foreign companies covering the information security.
 Through solving the research problems, the author managed to draw a number of conclusions:
 
 Dynamic development of the electronic payment system causes the growth of cybercrime and cyber risks in payment systems;
 Despite quite active actions of state bodies and the Bank of Russia, the legal framework and infrastructure for electronic payments are still in the development stage;
 Cyber attacks cause significant damage not only to financial institutions, but also to companies from a non-financial sector, as well as to ordinary citizens using electronic payment systems.
 
 In the opinion of the author, the key organizational and legal measures aimed at mitigating cyber risks in electronic payments may be measures to form the centralized payment infrastructure of the Bank of Russia, introduce the corporate cyber threat management systems, improve policies and procedures for the protection of personal data at the corporate level, as well as train the employees in the field of information security of electronic settlements.

Cyber Risks and Governance Structures: Study of Risk Mitigation in the Services

“…Sendo assim, o risco cibernético pode ser entendido como aquele que ocasiona o dano físico ou impacta na perdas financeiras quando há ocorrência de mau funcionamento no ambiente digital ou quando dados são negligenciados ou compartilhados ilegalmente (Nieuwesteeg e Waard, 2018), em situações de ameaças cibernéticas (Smidt e Botzen, 2017; Dan Geer, Eric Jardine e Eireann Leverett, 2020), ocorrência de crimes financeiros e fraudes (Dudin et al, 2018;Santucci, 2018), ampliação da cibersegurança (Böhme, 2005), incidência de desvantagens informacionais (Shetty, 2018) e riscos econômicos em Internet das Coisas (Lee, 2020;Radanliev et al, 2020) constituindo como principais elementos do risco que têm permeado todo o espaço cibernético.…”