Direction 2023
RBI Master Direction Information Technology Governance, Risk, Controls and Assurance Practices, 2023
Issued by Reserve Bank of India
Effective: 1 Apr 2024
Plain-English summary
RBI’s Master Direction on IT Governance, Risk, Controls and Assurance Practices 2023 that came into full effect from 1 April 2024, lays out a singular regulatory model for cybersecurity and management of IT infrastructure in Indian banks, major NBFCs, and financial institutions. It makes sure that technical responsibility is directly assigned to the Board of Directors through the creation of IT strategy committees, vendor risk controls, and cybersecurity resilience plans. Through this mandate, it overrides previous circulars and legalizes the operational controls by mandating standardized practices like continuous vulnerability assessments, thorough migration data testing, and disaster recovery plans to ensure no operational hitches and safeguard the banking system from technological risks.
Who it applies to
Banking · NBFC / Non-bank Lending
Topics
Cybersecurity & IT Risk
Latest news
-
India's external debt rises to $778.2 billion at June 2026
1 Oct 2026
Reserve Bank of India issued the Quarterly Report on External Debt as of the end of June 2026. The total external debt of India has increased to $778.2 billion, up by $15.4 billion. The external debt-to-GDP ratio has de…
-
RBI finalizes Basel III market risk capital requirements for banks
26 Sep 2026
The Reserve Bank of India has issued final Directions on minimum capital requirements for market risk under the revised Basel III framework, effective April 1, 2027. The framework adopts the Simplified Standardised Appr…
-
RBI penalizes gold-loan fintech KLM Axiva Finvest Limited for auction surplus non-payment
26 Sep 2026
The Reserve Bank of India imposed a monetary penalty of ₹2.70 lakh on KLM Axiva Finvest Limited for regulatory non-compliance discovered during statutory inspection. The company failed to remit surplus amounts to borrow…
-
RBI penalizes Hero Fincorp for excess interest collection breaches
26 Sep 2026
The Reserve Bank of India imposed a monetary penalty of 10 lakh rupees on Hero Fincorp Limited on September 22, 2026, following supervisory findings of non-compliance with RBI's "Fair Practices Code for Lenders – Chargi…
-
RBI penalizes Ola Financial Services for KYC compliance failures
25 Sep 2026
The Reserve Bank of India imposed a monetary penalty of ₹3.10 lakh on Ola Financial Services Private Limited for non-compliance with KYC directions under the Payment and Settlement Systems Act, 2007. Following a statuto…