RBI Cybersecurity Framework for Banks
Chapter V J and K: audit logs, patch, vulnerability and change management – RBI Cybersecurity Framework for Banks

RBI Cybersecurity Framework for Banks 99: Para 99: risk-based patching strategy with an inventory of patchable components

What does 99 require?

The bank adopts a documented risk-based strategy to inventory IT components needing patches, identify all applicable patches and apply them in time to minimise vulnerable systems and exposure time.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter V J and K: audit logs, patch, vulnerability and change management – RBI Cybersecurity Framework for Banks

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll RBI Cybersecurity Framework for Banks controls