the system for receiving information from financial institutions “drops”

Since last Tuesday, November 22, the Inter-institutional Information Transfer System (SITI) of the National Banking and Securities Commission (CNBV) has presented failures in its operation, to the point of stopping the service, with no date to resume its full operation.

This medium verified the fall of the site with financial institutions that have had problems to access said platform, through which the 5,000 financial entities subject to the supervision of this body send financial, accounting and operational information, in order to comply with the provisions issued by the CNBV itself and other authorities.

The functionality of the CNBV’s SITI is divided into three parts: SITI Services, WEB SITES y SITI PLD (Prevention of Money Laundering) and in the last two there have been failures in their operation.

“At the National Banking and Securities Commission we want to provide you with the best experience, at this time we are working to improve our service, we are carrying out maintenance actions, the service will stop until further notice.”, can be read in the SITI section where the information is received. information regarding the prevention of money laundering and money financing.

In this context, the authority chaired by Jesús de la Fuente Rodríguez enabled an alternate channel to access SITI WEB, but to access it, it first asks financial institutions to send the following information to his email siti@cnbv.gob.mx:

1. Public IP’s.

2. Company name.

3. Key to the Financial System Catalog.

“It is suggested to approach their Information Technology areas to confirm the information before it is sent and, where appropriate, validate the corresponding IP in each computer equipment… In the event that once the request is sent or problems arise access, please report it to the CNBV Service Center”, can be read in the site’s announcement.

The CNBV was consulted in this regard regarding said failures; however, until the publication of this note, he did not answer the questions sent by this means.

According to actors from the financial ecosystem, although the authority argues a maintenance issue, the strange thing is that this situation has persisted for several days, which makes it difficult for entities to send information to the authority in a timely manner.

Compliance experts suggest that entities that could be affected take backup images of all the legends that appear in this application in order to have backup in case of any eventuality that could lead to a sanction for not complying with the sending of information in the required times.

This incident adds to the recent events that different government agencies have presented in the field of cybersecurity, such is the case of the Guacamaya Leaks, where a group of hackers violated Army systems to access sensitive information and later filter it.