RBI issues new directions to banks, NBFCs on IT governance & cyber security, ET LegalWorld | Court Practice News


The RBI has issued a new comprehensive Master Direction to banks and NBFCs on Information Technology Governance, Risk, Controls and Assurance Practices which spells out the role of Directors of these regulated entities to discharge their duties in order to safeguard the interests of customers.

These directions incorporate, consolidate and update the guidelines, instructions and circulars on IT Governance issued earlier and will come into effect from April 1, 2024.

The guidelines havedirected all regulated entities to keep a close watch on:

‘Cyber events’defined as any observable occurrence in an information system. Cyber events sometimes provide indication that a cyber incident is occurring.

Cyber security’ — Preservation of confidentiality, integrity and availability of information through the cyber medium. In addition, other properties, such as authenticity, accountability, non-repudiation and reliability can also be involved.

‘Cyber incident’ — which is a cyber event that adversely affects the cyber security of an information asset whether resulting from malicious activity or not.

‘Cyber-attack’ — Malicious attempts to exploit vulnerabilities through the cyber medium to damage, disrupt or gain unauthorised access to assets.

‘De-militarized Zone’ or ‘DMZ’ is a perimeter network segment that is logically between internal and external networks.

‘Information Asset’ — Any piece of data, device or other component of the environment that supports information-related activities.Information Assets include information system, data, hardware and software.

Foreign banks operating in India have also been asked to follow the guidelines and to hold discussions with the RBI in case they have to seek an exemption in the case of any particular norm.

  • Published On Nov 8, 2023 at 10:41 PM IST

Join the community of 2M+ industry professionals

Subscribe to our newsletter to get latest insights & analysis.

Download ETLegalWorld App

  • Get Realtime updates
  • Save your favourite articles


Scan to download App



Leave a Reply

Your email address will not be published. Required fields are marked *

Next Post

Sebi streamlines process for investors to access unclaimed funds in REITs, InvITs, debt securities, ET LegalWorld | Court Practice News

Wed Nov 8 , 2023
Capital markets regulator Sebi on Wednesday came out with detailed procedures for dealing with unclaimed funds of investors lying with entities having listed non-convertible securities, REITs and InvITs. Also, the regulator has put in place a manner of claiming such unclaimed amounts by investors. The new framework will come into […]

You May Like

Breaking News