RBI Cybersecurity Framework for Banks
Chapter III C to G: IT Strategy Committee, senior management, committees, Head of IT and CISO – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 28: Para 28: documented CISO role: strategy, enforcement, committee invitee, SOC, reporting to risk ED, quarterly review

What does 28 require?

The CISO's documented role covers at least driving cyber strategy and regulatory compliance, enforcing the protective policies and coordinating security internally and with external agencies, being a permanent invitee to the ITSC and IT Steering Committee, managing and monitoring the SOC and cyber projects, ensuring security solutions work, reporting directly to the Executive Director or equivalent overseeing risk management, and placing a review of cyber risks and preparedness before the Board, its Risk Management Committee or the ITSC at least quarterly.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter III C to G: IT Strategy Committee, senior management, committees, Head of IT and CISO – RBI Cybersecurity Framework for Banks

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll RBI Cybersecurity Framework for Banks controls