RBI Cybersecurity Framework for Banks

Chapter IV: IT and information security risk management – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 45: Para 45: riskiness categorised low to very high including business component riskiness

Depending on inherent risk the bank categorises its riskiness as low, moderate, high or very high (or a similar scale), factoring in the riskiness of business components.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter IV: IT and information security risk management – RBI Cybersecurity Framework for Banks

39 Para 39: risk policy covers IT and cyber risk, reviewed annually by RMCB with ITSC
40 Para 40: IT and information security risk management framework
41 Para 41: asset risk assessment guided by security standards or control frameworks
42 Para 42: staff and service providers comply with security and acceptable-use policies
43 Para 43: annual review of security infrastructure and policies; tackle phishing and spoofing
44 Para 44: inherent risk factors reckoned
46 Para 46: control evaluation factors including threat intelligence and information sharing

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All RBI Cybersecurity Framework for Banks controls