RBI Cybersecurity Framework for Banks
Chapter V R to X: cryptography, straight through processing, surveillance, threat defence, anti-phishing and VA/PT – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 152: Para 152: post-implementation VA/PT on production, or documented ISC-approved deviation

What does 152 require?

After implementation or upgrade, VA/PT is performed on production; if PT must be done in test, the test environment's version and configuration match production and any deviation is documented and approved by the Information Security Committee.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter V R to X: cryptography, straight through processing, surveillance, threat defence, anti-phishing and VA/PT – RBI Cybersecurity Framework for Banks

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll RBI Cybersecurity Framework for Banks controls