It is important for mobile payments to use the same underlying solutions, such as the industry’s own instant payment solution or an enhanced BankAxept system. This will provide cheap and accessible solutions for customers, regardless where they hold an account, and entails economies of scale. In some cases, this will also result in faster payments. Norges Bank will seek to initiate a dialogue with the industry on this matter. I have also noted that there are many operators that are now working to develop common terminal solutions for mobile payments. Time will show what the concrete solution will be. For the system to work efficiently, users must have good information about the services. Optimally, the prices charged to users should reflect costs. 2  BIS central bankers’ speeches  A more decentralised financial infrastructure? Today’s financial infrastructure is largely centralised. Transactions pass through one or several intermediaries before final approval and settlement in a central bank or a central securities depository. At the core of a centralised payment system is the account system in the central bank. Each bank holds an account with the central bank and settlement between banks is effected by moving funds between these accounts. At the level below the central bank, the payment system consists of several layers of accounts. Banks that hold an account with the central bank have their own account system for customers. A payment between customers in different banks therefore passes through many stages, and they are verified at each stage.

Cyber security The consequences of cyberattacks can be considerable. What we are now witnessing is probably just the beginning. We must find a suitable way to mitigate risk, without making our systems needlessly expensive. Cyber-security challenges are among the most significant challenges to our payment system. Without an efficient defence system, trust in the system can be undermined over time. For its part, Norges Bank is devoting considerable resources to securing its systems, oversight of activities and implementing measures to protect against cyber attacks. As part of oversight and supervision, we will increase our monitoring of cyber-security risks in the payment system. This requires cooperation, both nationally and internationally, to identify and combat cyberattacks. Nationally, this takes place through, for example NorCERT, part of the Norwegian National Security Authority (NSM), and for the financial sector through the Norwegian Financial Sector Cyber Security Center (FinansCERT) under Bits. The Nordic financial sector has established 3/5  BIS central bankers' speeches  Nordic Financial CERT as an extension of the Norwegian FinansCERT. The need for cooperation does not stop at a Nordic level. The challenges are international, and are shared by private financial undertakings, their service providers and subcontractors and authorities in many countries. Measures to promote cyber security are technically complicated and require specialist expertise. But it is management and boards of directors in institutions and companies that have the final responsibility and decide strategy and resource use. This responsibility cannot be delegated or outsourced to others. Owners and managers must be aware of their ultimate responsibility.