November 29, 2016
Show AI Summary
Cyber security reporting: banks required to report unusual incidents promptly and maintain crisis management and preparedness.
Guidance requiring banks to adopt a comprehensive cyber-security framework including a cyber-security policy, a cyber crisis management plan, gap assessments against baseline requirements, monitoring of risk indicators, and mandatory reporting of unusual cyber security incidents within 2 to 6 hours; supported by RBI's CSITE Cell, Cyber Crisis Management Group, IT examinations, CERT-In preparedness testing, PCI DSS forensic audits for card breaches, and an IT Subsidiary to focus on cyber security across RBI and regulated entities.