CORRECTED COPY BANGKO SENTRAL NG PILIPINAS OFFICE OF THE DEPUTY GOVERNOR ‘SUPERVISION AND EXAMINATION SECTOR MEMORANDUM NO. M-2012-_011 To : ALL BANKS Subject : Guidelines on Submission of Information Technology (IT) Profile Report In order to build the baseline information of IT systems of Philippine banks and to risk profile the complexity of IT operations based on technology-related products and services offered, delivery channels, and processes involved, all banks are required to accomplish and submit an IT Profile Report as of 31 December 2011. This is in furtherance to Sec. X176 of the Manual of Regulations of Banks (MORB) on Technology Risk Management. The following shall be observed in the submission of the IT Profile Report: 1.The IT Profile reporting template can be accessed at http://www.bsp.gov.ph/fro/templates. The initial IT Profile Report as of 31 December 2011 shall be submitted to the BSP on or before 31 March 2012. Subsequent reports shall be submitted on an annual basis within twenty-five (25) calendar days from the end of reference year. (Attached as Annex A is sample format of IT Profile Report.) 2. The IT Profile report shall be submitted electronically to the following e- mail addresses: E-mail Address. Type of Reporting Institution sdckb-itprofile@bsp.gov.ph Universal/Commercial Banks (U/KBs) sdetb-itprofile@bsp.gov.ph Thrift Banks (TBs) sderb-itprofile@bsp.gov.ph Rural/Cooperative Banks (R/CBs) using the following format for the subject: “ITPROFILE ,”, e.g.: To : Sdctb-itprofile@bsp.gov.ph cc Subject: ITPROFILE , 31 December 2011 ‘A. Mabini St, Malate 1004 Mail, Philippines» (632) 7087701 + www.bsp.govph«bspmall@bsp-govph3. The certification, duly notarized and signed by the authorized official of the reporting institution, shall be sent within the prescribed submission deadline to the Director of the BSP Supervisory Data Center (SDC) via facsimile at (632) 708-7554 or 708-7558, 4. Institutions that are unable to transmit the IT Profile Report electronically can submit said reports in CD together with the aforementioned certification through messengerial or postal services within the prescribed deadline to: The Director Supervisory Data Center Bangko Sentral ng Pilipinas 16" Floor, Multi-Storey Building BSP Complex, A. Mabini Street Malate, Manila 1004 5. The IT Profile Report template and other relevant attachments are also available upon request at the BSP-SDC through the above-mentioned e-mail addresses and/or postal address. For compliance. IESTOR A. ESPENILYA, JR. Deputy Goverdor 1] February 2012 Page 2 of 2Bank Name CERTIFICATION This is to certify that the attached IT Profile as of contains accurate description of the bank’s application systems, hardware, network, electronic banking products and services, disaster recovery and business continuity plan, and other technology-related information as well as the IT organizational structure of the bank. President or Officer of equivalent rank Head of Compliance SUBSCRIBED AND SWORN TO BEFORE ME THIS day of 20__, affiant exhibiting to me their: NOTARY PUBLIC Until December 31, 20__ PTR No. Place Doc No. Page No. Book No. Series of,INFORMATION TECHNOLOGY PROFILE (Ware of bank) Code (rom Financia int Library 200090 URL / Web site ‘Type of institution: (GENERAL INFORMATION. 1. Provider off Services 2. Location of Primary Data Center 3. Location of Back-up Data Center KertT officers Designation Era Adaress ‘Gist formation Ofer CO) Ghiet Technology Officer (TO) Information Sec Ores (55). Governance Commies HeadCorrectness cay atte 8) sorte — | rot | onset© 00000 Branch Network [Oniine (Connected) [Ftanaiine = Wireless [Offine (Stand-atene) ots + Annucl yeor-end report cutoff December 2011 ‘+ This form shale supported with o cover poge (duly notated) ndcting tho statement Inthe report are tue ondcorec.© ex0000 tectrone Banking 4 Please check electronic banking channels ava “alate Electron Banking Fail ara prosua SATs 7 Creat ard = Cash Card rapa Cod renetSanking odie eankng Phone Sankng (Vis/at ented rhe, please spect 2. Please check electron banking serces offered Type oe Banting Services rere oanting Consumer (Reta [teres Banking Corporate (Who) [rsate ATM Switch Network fancier Megane fexpresnet Encasn Ratontne fcr shen please peat res Card Service Proprietary (Bank ned Wish Brande Masteresrs ded thers please pect [asncacayrrepas Cd etary Gani nsv6d) VSA randed Mastercard arnded hers, peat 13. Peas check participation in electronic payment systems network: Tame of Payments Paripant Rear Tie Gros setvement System (ras). Ise Phigpine Domenic Dole Tansfer System FOOT ectronc Peso Ceating System EPCS Prigpine Dealing system [P05 Groue/FOOPOTY sp eRedscounting Service aureay of Freasury (oS Gian pease 4. eBanking: TerminalsMachives “Ai Machines sted farm [> ona Fonte [Pos reminals tated Ikosivomer termina. Annsiprarend repo, ef Cramer 200 No of Cra ‘asved Woot "Tueform shane suppres wih a cover page (ly Noto) acai that ttement nthe ere tv and erect,‘9000000 V. Communications Carrier Tndleate Primary, Secondary, and/or Bath] ‘Telecommunleations Carier notes: 1+ Annual yeor-e report cutoff December 2011. 1+ Tisform shollbe supported with a cover poge (duly notarited) indicating that statements inthe report are trv and core.uu 0 000000 Disaster Recovery (OR) and Business Continulty 3 (CP) 1. Please check avallablity of following Toad Last Update ate approved: Description svatable PANS | sporovea yin a Bocamened oR Fan 1 [Pecomenreacr | Date of most recent BCP/DRP tes: Annual year-end epont, cutoff December 2013 This erm aholbe surported with cover poge (uly notarized) indcating thot stotements inthe report are tue and covrect | |© 000000 VIL Others 4. Internet access (portal 2. Web browser: Sener eee 3. Software: eee ee SE OTTO ots: + Annual year-end report, cut-off December 2013 ‘+ This form shal be supported witha cover page (uy netorize) indicating thot stotements nthe report re true ond correct.