Reserve Bank of India (Commercial Banks – Cybersecurity, Technology: Risk, Resilience and Assurance Framework) Directions, 2026

Source: Reserve Bank of India

Category: Digital Lending

Published: Fri, 31 Jul 2026 16:00:00

RBI/DoS/2026-27/410 DoS.CO.CSITEG.4/31.01.015/2026-27 July 31, 2026 Reserve Bank of India (Commercial Banks – Cybersecurity, Technology: Risk, Resilience and Assurance Framework) Directions, 2026 Table of Contents Chapter I - Preliminary A. Short Title and Commencement B. Applicability C. Definitions Chapter II - Role of the Board A. Board Approved Policies B. Board Level Committees Chapter III – Information Technology Governance and Oversight A. IT Governance Framework B. Information Security Policy and Cybersecurity Policy C. IT Strategy Committee of the Board D. Senior Management and IT Steering Committee E. Information Security Committee F. Head of IT Function G. Chief Information Security Officer H. Information Technology Project Management I. IT Architecture J. IT Services Management Chapter IV - IT and Information Security Risk Management A. Periodic Review of IT related Risks B. IT and Information Security Risk Management Framework C. Risk Identification, Assessment, and Documentation Chapter V - Baseline Cybersecurity and Resilience Requirements A. Inventory Management of Information Assets B. Data Leak Prevention Strategy C. Data Migration Controls D. Preventi