Direction 2023
RBI Master Direction Information Technology Governance, Risk, Controls and Assurance Practices, 2023
Issued by Reserve Bank of India
Effective: 1 Apr 2024
Plain-English summary
RBI’s Master Direction on IT Governance, Risk, Controls and Assurance Practices 2023 that came into full effect from 1 April 2024, lays out a singular regulatory model for cybersecurity and management of IT infrastructure in Indian banks, major NBFCs, and financial institutions. It makes sure that technical responsibility is directly assigned to the Board of Directors through the creation of IT strategy committees, vendor risk controls, and cybersecurity resilience plans. Through this mandate, it overrides previous circulars and legalizes the operational controls by mandating standardized practices like continuous vulnerability assessments, thorough migration data testing, and disaster recovery plans to ensure no operational hitches and safeguard the banking system from technological risks.
Who it applies to
Banking · NBFC / Non-bank Lending
Topics
Cybersecurity & IT Risk
Latest news
-
RBI extends regulatory directive for cooperative urban bank three months
3 Oct 2026
The Reserve Bank of India has extended a regulatory directive issued under the Banking Regulation Act to Innovative Co-operative Urban Bank Limited, New Delhi for an additional three months through January 4, 2027. The…
-
RBI extends supervisory directions for Industrial Co-operative Bank Ltd.
3 Oct 2026
The Reserve Bank of India has extended supervisory directions issued to The Industrial Co-operative Bank Ltd., Guwahati under Section 35A read with Section 56 of the Banking Regulation Act, 1949. The original directive…
-
RBI finalizes Basel III market risk capital requirements for banks
26 Sep 2026
The Reserve Bank of India has issued final Directions on minimum capital requirements for market risk under the revised Basel III framework, effective April 1, 2027. The framework adopts the Simplified Standardised…
-
RBI penalizes gold-loan fintech KLM Axiva Finvest Limited for auction surplus non-payment
26 Sep 2026
The Reserve Bank of India imposed a monetary penalty of ₹2.70 lakh on KLM Axiva Finvest Limited for regulatory non-compliance discovered during statutory inspection. The company failed to remit surplus amounts to…
-
RBI penalizes Hero Fincorp for excess interest collection breaches
26 Sep 2026
The Reserve Bank of India imposed a monetary penalty of 10 lakh rupees on Hero Fincorp Limited on September 22, 2026, following supervisory findings of non-compliance with RBI's "Fair Practices Code for Lenders…