SBP Shifts to VPN-Based Access for Enhanced Regulatory Security

KARACHI: The regulatory portals of the State Bank of Pakistan (SBP) will soon be accessible only through Virtual Private Networks (VPNs), as the bank moves to better protect its customers’ data in light of the growing role of digital finance.

The SBP has mandated that all regulated entities switch from web-based to VPN-based access by May 30, 2025, to ensure a smooth transition.

According to the SBP, their Regulatory Approval System (RAS) has completely digitized the procedure for accepting proposals and requests from REs and issuing regulatory decisions.

Furthermore, a service desk system has been implemented to manage complaints pertaining to portals hosted by SBP, including RAS.

The SBP has instructed REs to acquire the required Multi-Factor Authentication (MFA) accounts ahead of time to guarantee a seamless changeover.

In order to ensure that the RAS and service desk platforms can continue to function normally under the new security framework, the central bank has stressed the importance of prompt compliance.