RBI issues new cybersecurity framework for commercial banks

The Reserve Bank of India issued a new cybersecurity framework for commercial banks on July 31, replacing existing instructions. Banks must conduct vulnerability assessments every six months, annual penetration tests, and half-yearly disaster recovery drills. The framework excludes small finance banks, payments banks, and local area banks.