Draft Master Direction - Information Technology Governance, Risk, Controls and Assurance Practices

It was announced in the Statement on Developmental and Regulatory Policies, released with the bi-monthly Monetary Policy Statement dated February 10, 2022, that guidelines relating to Information Technology Governance and Controls, Business Continuity Management and Information Systems Audit require to be updated and consolidated.

2. Accordingly, as part of consolidation and updation of extant instructions, the Reserve Bank of India has today placed on its website ‘Draft Master Direction - Information Technology Governance, Risk, Controls and Assurance Practices’ for comments of stakeholders and members of the public.

3. Comments / feedback from Regulated Entities (RE) and other stakeholders may be submitted by November 20, 2022 through email with the subject line ‘Feedback on Master Direction - Information Technology Governance, Risk, Controls and Assurance Practices’. The final Master Direction shall be issued by Reserve Bank after considering the feedback received.

(Yogesh Dayal)     
Chief General Manager