Charter of the Information and Communications Committee

Charter of the Information and Communications Technology (ICT) Committee

The ICT Committee is entrusted with the following responsibilities:

• Compliance with Regulatory Framework:
  • The committee shall comply with the Information and Communications Technology (ICT) Governance Guidelines issued by the Central Bank of Iraq in 2019 and ensure full implementation of all related requirements.
• Information Security Monitoring:
  • Conduct daily monitoring of the bank’s firewall systems, ensuring timely updates and configurations in accordance with operational requirements, under the supervision of qualified personnel to maintain the security of information and communication systems.
• Infrastructure Oversight:
  • Supervise the bank’s infrastructure, including a fully equipped Data Center that contains:
    • Cooling systems
    • Environmental sensors
    • Surveillance cameras
    • Raised flooring
    • Access control devices
    • Uninterruptible Power Supply (UPS) systems
  • This infrastructure supports both operational continuity and IT systems security.
• Backup and Data Protection:
  • Ensure regular, automated and manual backup procedures are in place. Backups are updated daily and stored in secure locations to safeguard data integrity.
• Server and Electronic Services Development:
  • Oversee the development and activation of electronic service servers following installation and testing, ensuring their readiness for customer use.
• Internal Network and Website Management:
  • Supervise the team responsible for the internal network to ensure operational continuity.
  • Monitor updates, modifications, and data uploads related to the bank’s website and online platforms.
• Business Continuity and Disaster Recovery:
  • Coordinate with the Business Continuity Committee and the IT Department to ensure proper management and functionality of disaster recovery servers.
• Policy and Procedure Development:
  • Monitor, evaluate, and continuously improve ICT policies and procedures in line with governance requirements and institutional ICT management standards.
• Reporting and Governance Oversight:
  • Submit regular reports to the ICT Governance Committee at the Board of Directors level.