RBI Cybersecurity Framework for Banks

Chapter IV: IT and information security risk management – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 39: Para 39: risk policy covers IT and cyber risk, reviewed annually by RMCB with ITSC

The risk management policy includes IT and cybersecurity risks and is reviewed and updated at least annually by the Risk Management Committee of the Board in consultation with the ITSC.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter IV: IT and information security risk management – RBI Cybersecurity Framework for Banks

40 Para 40: IT and information security risk management framework
41 Para 41: asset risk assessment guided by security standards or control frameworks
42 Para 42: staff and service providers comply with security and acceptable-use policies
43 Para 43: annual review of security infrastructure and policies; tackle phishing and spoofing
44 Para 44: inherent risk factors reckoned
45 Para 45: riskiness categorised low to very high including business component riskiness
46 Para 46: control evaluation factors including threat intelligence and information sharing

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All RBI Cybersecurity Framework for Banks controls