RBI Cybersecurity Framework for Banks

Chapter V L to P: access control, teleworking, customer authentication, mail and removable media – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 115: Para 115: customer authentication framework with mutual verification across channels

What does 115 require?

The bank implements an authentication framework giving positive identity verification of customers and letting customers verify the bank's authenticity, across all delivery channels.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter V L to P: access control, teleworking, customer authentication, mail and removable media – RBI Cybersecurity Framework for Banks

104 Para 104: access only for a valid business need
105 Para 105: supervise, log and review elevated access
106 Para 106: secure access with data at rest and in transit protected
107 Para 107: protect credentials, tokens and access profiles against leakage and attack
108 Para 108: no local admin rights on end-user devices except time-bound need
109 Para 109: centralised authentication and authorisation with strong passwords, least privilege and SoD
110 Para 110: risk-based two-factor or multi-factor authentication; mandatory MFA for privileged users of critical systems and activities
111 Para 111: centralised management, logging and monitoring of privileged access to critical systems

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All RBI Cybersecurity Framework for Banks controls