RBI Cybersecurity Framework for Banks 146: Para 146: whitelist internet websites and systems

Other controls in Chapter V R to X: cryptography, straight through processing, surveillance, threat defence, anti-phishing and VA/PT – RBI Cybersecurity Framework for Banks

• 140 Para 140: strong, non-deprecated cryptography compliant with law
• 141 Para 141: no manual intervention in data between processes for critical applications
• 142 Para 142: tested, automated, authenticated STP interfaces with audit trails
• 143 Para 143: set up a CSOC for continuous surveillance
• 144 Para 144: multi-point defence against malicious code
• 145 Para 145: anti-malware with behavioural detection everywhere, centrally managed
• 147 Para 147: consider secure web gateways with HTTPS deep inspection
• 148 Para 148: anti-phishing and anti-rogue app takedown services