Banks & Insurance
What is RBI Cyber Security Framework?
Take a significant step forward in fortifying your banking infrastructure with next-generation cyber defense capabilities!
Establishing Cyber Security Baseline and Resilience
Operating Cyber Security Operations Centre (C-SOC)
Cyber Security Incident Reporting (CSIR)
Cyber Security Policy
Cyber Security Strategy
Cyber Security Organization
Cyber Risk / Gap Assessment
Security Testing
Network and Database Security
Physical & Environmental Security
Third Party Risk Management
Cyber Security Awareness
Cyber Crisis Management Plan
Cyber Security Operation Centre
Incident Response & Management
Establishing Cyber Security Baseline
| Annex1- Baseline Cyber Security and Resilience Requirements | ||||
|---|---|---|---|---|
| Inventory Management of Business IT Assets | Secure Configuration | Patch/Vulnerability & change Management | Authentication Framework for Customers | Risk based transtion monitoring |
| Preventingexecution of unauthorized software | Secure mail & messaging systems | Application Security Life Cycle (ASLC) | User Access Control/ Management | Incident Response & Management |
| Removable Media | Network Management & Security | Vulnerability assessment & Penetration Test | Audit Log settings | Anti-Phishing |
| Data Leak prevention strategy | Advanced Real-time Threat Defense and Management | Red Team Exercises | Maintenance, Monitoring, & Analysis of Audit Logs | Customer Education & Awareness |
| User/ Employee/ Management Awareness | Environmental Controls | Forensics | Metrics | Vendor Risk Management |
Establish Cyber Security Operations Centre (C-SOC)
Functional Requirements of C-SOC
Outline the necessary functional criteria for the security operations centre.
Integration Requirements
Integrate the CSOC with security solutions to effectively monitor and generate alerts.
Process Requirements
Define the CSOC's operational processes, playbooks, and manuals. Develop incident response processes and playbooks compliant with RBI CSF CSOC requirements.
Governance Requirements
Establish the governance structure and management framework for the CSOC.
People Requirements
Ensure that the CSOC team possesses the requisite skillsets for efficient operations.
Technology Requirements
Deploy advanced CSOC technologies, including SIEM integrated with threat intelligence feeds/services.
Cyber Security Incident Reporting (CSIR)
Template for Reporting Cyber Incidents
A template for reporting cyber incidents offers a concise overview of the event that transpired. It can vary in length, depending on the complexity of the incident.
Cyber Security Incident Reporting (CSIR) Form
Templates, guides, and resources for incident response empower organizations to develop a strong incident management and response framework.
