Information technology security requires payment service providers to maintain safeguards, documented policies, and demonstrate compliance through independent certification.

Payment Service Providers must secure information technology systems and other infrastructure used for payment services against unauthorised access and manipulation. They must prepare and maintain written security policies and procedures. The Authority may issue directions on security procedures and may require certificates from independent professionals confirming compliance with system-security obligations, documentation requirements, and applicable directions.

---

---

---