RBI Cybersecurity Framework for Banks
Chapter V R to X: cryptography, straight through processing, surveillance, threat defence, anti-phishing and VA/PT – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 151: Para 151: VA every six months and PT every 12 months for critical and DMZ customer-facing systems

For critical information systems and DMZ systems with a customer interface, VA is done at least every six months and PT at least every 12 months; non-critical systems follow a risk-based periodicity.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter V R to X: cryptography, straight through processing, surveillance, threat defence, anti-phishing and VA/PT – RBI Cybersecurity Framework for Banks

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll RBI Cybersecurity Framework for Banks controls