RBI Cyber Security Framework: A Compliance Checklist for Banks

Understanding the RBI Framework The Reserve Bank of India mandates a comprehensive cyber security framework for banks covering governance, risk assessment, continuous surveillance and incident response. Core Pillars Board-approved cyber security policy Cyber Security Operations Centre (C-SOC) requirements Cyber Crisis Management Plan (CCMP) Annual VAPT of critical systems by CERT-In empanelled auditors Banks frequently struggle with evidence management during audits. Start collecting artefacts - policies, scan reports, incident logs - at least one quarter before the audit window. How Digital Defense Helps As a CERT-In empanelled auditor, we conduct end-to-end RBI framework gap assessments, remediation tracking and final compliance audits for scheduled banks and NBFCs.