RBI Cybersecurity Framework for Banks

Chapter IV: IT and information security risk management – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 43: Para 43: annual review of security infrastructure and policies; tackle phishing and spoofing

The bank reviews its security infrastructure and policies at least annually in light of its experience and emerging threats, and takes steps to tackle cyber-attacks including phishing and spoofing and mitigate their effects.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter IV: IT and information security risk management – RBI Cybersecurity Framework for Banks

39 Para 39: risk policy covers IT and cyber risk, reviewed annually by RMCB with ITSC
40 Para 40: IT and information security risk management framework
41 Para 41: asset risk assessment guided by security standards or control frameworks
42 Para 42: staff and service providers comply with security and acceptable-use policies
44 Para 44: inherent risk factors reckoned
45 Para 45: riskiness categorised low to very high including business component riskiness
46 Para 46: control evaluation factors including threat intelligence and information sharing

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All RBI Cybersecurity Framework for Banks controls