BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Infofacility//Compliance calendar//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Infofacility compliance calendar: RBI
X-WR-CALDESC:RBI's IT and outsourcing directions. From the regulatory track
 er at infofacility.com. This explains the law in plain English. It is not 
 legal advice.
X-WR-TIMEZONE:Asia/Kolkata
REFRESH-INTERVAL;VALUE=DURATION:P1D
X-PUBLISHED-TTL:P1D
BEGIN:VEVENT
UID:rbi-it-outsourcing-master-direction@infofacility.com
DTSTAMP:20261105T175852Z
DTSTART;VALUE=DATE:20230410
DTEND;VALUE=DATE:20230411
SUMMARY:RBI: Master Direction on Outsourcing of Information Technology Serv
 ices (RBI/2023-24/102)
DESCRIPTION:Banks\, larger NBFCs and other regulated entities must govern m
 aterial IT outsourcing through a board-approved policy\, risk-based due di
 ligence\, contracts with audit and access rights and storage of data in In
 dia\, exit plans and concentration risk checks\, and providers must report
  incidents fast enough for the entity to notify RBI within 6 hours\; effec
 tive 1 Oct 2023.\n\nStatus: In force\nSource: RBI Master Direction RBI/202
 3-24/102\, DoS.CO.CSITEG/SEC.1/31.01.015/2023-24\, https://www.rbi.org.in/
 Scripts/NotificationUser.aspx?Id=12486\nMore: https://www.infofacility.com
 /tracker\n\nThis explains the law in plain English. It is not legal advice
 .
URL:https://www.infofacility.com/tracker
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:rbi-it-governance-master-direction@infofacility.com
DTSTAMP:20261105T175852Z
DTSTART;VALUE=DATE:20231107
DTEND;VALUE=DATE:20231108
SUMMARY:RBI: Master Direction on Information Technology Governance\, Risk\,
  Controls and Assurance Practices (RBI/2023-24/107)
DESCRIPTION:From 1 Apr 2024\, commercial banks\, NBFCs in the top\, upper a
 nd middle layers\, credit information companies and all-India financial in
 stitutions need a board-level IT Strategy Committee\, a CISO independent o
 f the IT function\, risk-based IS audit\, six-monthly vulnerability assess
 ments and annual penetration tests of critical systems\, and half-yearly D
 R drills.\n\nStatus: In force\nSource: RBI Master Direction RBI/2023-24/10
 7\, DoS.CO.CSITEG/SEC.7/31.01.015/2023-24\, https://www.rbi.org.in/Scripts
 /NotificationUser.aspx?Id=12562\nMore: https://www.infofacility.com/tracke
 r\n\nThis explains the law in plain English. It is not legal advice.
URL:https://www.infofacility.com/tracker
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR
