Directive 364
Stands forBank of Israel Proper Conduct of Banking Business Directive 364 — Management of IT Risks, Information Security and Cyber Defence
The Bank of Israel directive covering IT risk, information security and cyber defence, revision 11/24. Its §61.4 is the patch-management clause.
Also calledProper Conduct of Banking Business 364 · PCBB 364 · הוראה 364
The Proper Conduct of Banking Business directive that gathers the Bank of Israel's requirements on IT risk management, information security and cyber defence into one document, revision 11/24. It is the directive to write patch-management policy against today, and its §61.4 says so outright.
The clauses that bear on patching
| Clause | Subject |
|---|---|
| 61.3 | EOL/EOS identification and risk assessment |
| 61.4 | Patch management |
| 97 | Emergency changes |
| 98 | Audit trail |
| 114.2 | Configuration management |
| 114.7 | Vulnerability management |
| 114.8 | Patch-management control |
Scope is defined in clause 10.
Citing a directive number alone is a weak citation. What stands up in front of an auditor is a citation to a clause.