It was announced in the Statement on Developmental and Regulatory Policies, released with the bi-monthly Monetary Policy Statement dated February 10, 2022, that guidelines relating to Information Technology Governance and Controls, Business Continuity Management and Information Systems Audit require to be updated and consolidated.

2. Accordingly, as part of consolidation and updation of extant instructions, the Reserve Bank of India has today placed on its website ‘Draft Master Direction - Information Technology Governance, Risk, Controls and Assurance Practices’ for comments of stakeholders and members of the public.

3. Comments / feedback from Regulated Entities (RE) and other stakeholders may be submitted by November 20, 2022 through email with the subject line ‘Feedback on Master Direction - Information Technology Governance, Risk, Controls and Assurance Practices’. The final Master Direction shall be issued by Reserve Bank after considering the feedback received.

(Yogesh Dayal)     
Chief General Manager

Information technology governance: draft master direction placed for public consultation, feedback to determine final consolidated standards. The Reserve Bank has placed a draft Master Direction on Information Technology Governance, risk, controls and assurance practices covering governance, risk and control frameworks, assurance and business continuity for regulated entities, and invited feedback from Regulated Entities and stakeholders by the prescribed deadline; the Bank will consider submissions before issuing the final consolidated Master Direction.