Security Compliance Guide for Key Industries in Brazil

Brazil's financial regulators mainly include:

● Brazil's National Monetary Council (the "CMN") is the supreme decision-making institution in Brazil's financial system. The CMN is in charge of formulating monetary and credit policies, approving the establishment of financial institutions and their scope of operations, and regulating capital markets.

● The Central Bank of Brazil (the "BCB") is the executive body of the CMN and the highest financial authority in Brazil.

To maintain and strengthen the financial security and stability of financial institutions, Brazil's financial regulators have issued many regulations, including:

● Resolution 4,893, issued by the CMN, which specifies cybersecurity policies that the institutions regulated under the BCB shall comply with, covering requirements for data processing, data storage, and cloud computing services.

● Resolution 85, issued by the BCB, which specifies cybersecurity policies that the payment organizations authorized by the BCB shall comply with, covering requirements for data processing, storage, and cloud computing services.

● Decree No. 8,771, issued by the government of Brazil, which provides data security guidelines that entities performing data processing activities shall comply with. These guidelines focus on access control, encryption, and other measure for protecting personal data.

HUAWEI CLOUD User Guide to Financial Services Regulations & Guidelines in Brazil describes how Huawei Cloud will help you meet the regulatory requirements of the financial industry in Brazil.

As a cloud service provider, Huawei Cloud is committed to helping you meet regulatory requirements in the financial industry and continuously providing cloud services and environments that meet financial industry requirements. Huawei Cloud User Guide to Financial Services Regulations & Guidelines in Brazil describes what laws and regulations in the financial industry you need to comply with when you use Huawei Cloud services in Brazil and how Huawei Cloud will help you meet these requirements.

Huawei Cloud has been launched in Brazil. Government agencies can purchase and use Huawei Cloud products and services after creating an account on the Huawei Cloud website. When using Huawei Cloud services, government agencies must comply with applicable laws and regulatory requirements.

The Office of the Institutional Security of Brazil (GSI). GSI is responsible for affairs about information security, including developing and implementing information security programs and setting out minimum security requirements for using information security resources.

As a customer, you can decide how to use Huawei Cloud products and services to store and process content data. You are responsible for the security of content data and your compliance with Normative Instruction No.5 issued by the GSI in August, 2021. Normative Instruction No.5 aims to help government institutions regulated by GSI effectively identify and respond to cyber security risks. It also provides guidance for government institutions on how to maintain the security of information assets and online services.

The Instruction also sets out the minimum information security requirements that government agencies or entities must meet when using cloud computing services. It includes the following requirements:

Specifications and responsibilities for the secure use of cloud computing;

Minimum requirements for secure adoption of cloud computing to improve the information security level when using the technology;

Minimum security requirements for cloud service providers.

You can learn more in Huawei Cloud's Cloud Computing Security Compliance for Government Institutions in Brazil.

As a cloud service provider, Huawei Cloud is committed to helping government institutions meet regulatory requirements, and to providing the cloud services and environments that comply with industry standards. Huawei Cloud's Cloud Computing Security Compliance for Government Institutions in Brazil describes how Huawei Cloud will help you meet the information security requirements in Brazil.