RBI Cybersecurity Framework for Banks

Chapter V Q: third-party arrangements and ATM switch service providers – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 132: Para 132: agreements with audit right for the bank and inspection right for RBI

The bank enters into agreements with service providers giving, among other things, the bank a right to audit and the RBI or its authorised persons a right to inspect.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter V Q: third-party arrangements and ATM switch service providers – RBI Cybersecurity Framework for Banks

126 Para 126: vendor risk assessment and proportionate controls
127 Para 127: bank accountable for security risk in outsourced and partner arrangements
128 Para 128: evaluate need to outsource critical processes; select on risk assessment
129 Para 129: regular due diligence, oversight and management of vendors and partners
130 Para 130: policies to evaluate, approve and monitor vendor risk and materiality
131 Para 131: service providers adhere to Indian legal and regulatory requirements
133 Para 133: RBI access to all information resources consumed by the bank
134 Para 134: legal requirements on infrastructure location and cross-border data movement

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All RBI Cybersecurity Framework for Banks controls