RBI Cybersecurity Framework for Banks 137: Para 137: ATM switch ASP controls written into contracts and scoped to the IT ecosystem

What does 137 require?

The paragraph 136 controls are factored into the contract with the switch ASP and apply to the ASP's IT ecosystem (infrastructure, hardware, software, reconciliation, network interfaces, security solutions, HSMs, middleware, people, processes, systems and data) for ATM switch and any other payment system services to the bank.