RBI Guidelines for cyber security in the NBFC Sector

Determine the effectiveness of IT Security Controls

Need for Cyber Security Guidelines for NBFC Sector

The NBFC (Non-Banking Finance Company) sector has grown in size and complexity over the years. As the NBFC industry matures and achieves scale, its Information Technology /Information Security (IT/IS) framework, Business continuity planning (BCP), Disaster Recovery (DR) Management, IT audit, etc. must be benchmarked to best practices.

RBI Circular

The Reserve Bank of India issued a directive vide circular Master Direction – Information Technology Framework for the NBFC Sector – DNBS.PPD.No.04/66.15.001/2016-17, for the NBFC Sector’ advising all NBFCs to deploy strict cyber security practices.

How it works?

Audit Methodology

We share audit charter with the auditee highlighting the roles and responsibilities of the audit function as well as the audit objectives.

Audit Initiation

We provide Auditee a DRL highlighting the required policies and further analysis of the same will be performed in line with the compliance.

Document
Requirement List

Quantitative/Qualitative Risk Assessment will be conducted for every business process in scope and risk will be analyzed.

Identification &
Analysis

Action points as well as risk response methodology will be suggested via GAP Assessment Report and an action plan will be asked from the auditee.

Risk Response

We conduct review again post-deployment of the mitigations.

Post-Deployment
Review

Do you know?

233 days
Average days to detect and contain a data breach of financial services businesses
153.3 million
Financial data breaches accounted for leaked records from January 2018 to June 2022.
982
financial data breaches from January 2018 to June 2022

Want a quick Audit?

Detect & prevent attacks, before they succeed.

Stay ahead of the rapidly evolving threat landscape and keep your data protected without having to spend a fortune.

What do you get?

Audit Draft
Report
Draft report of the audit emphasizing the initial discoveries/findings.
Remediation
Support
Through a GAP Assessment Report, remediations to the identified non-compliant controls will be advised.
Final Audit
Report
A comprehensive report that elaborates the final audit findings.
Compliance
Letter
A letter that confirms that the requirements are met and all the applicable controls/regulations are fulfilled.

Take a peek into sample report

Our deliverables are comprehensive in nature that addresses both technical and business audiences.

Businesses love us

Learn what our customers say about our work.

Have you implemented the right security practice?

BOT Force

Get Started!

Get-started-WebServices-API
Enter the Captcha

Take a peek into sample report

By failing to prepare, you are preparing to fail

Case Study Form
Enter the Captcha

Take a peek into sample report

Case Study Form
Enter the Captcha

Get Started!

Case Study Form
Enter the Captcha

By failing to prepare, you are preparing to fail

Case Study Form
Enter the Captcha

Take a peek into sample report

Case Study Form
Enter the Captcha

Get Started!

Case Study Form
Enter the Captcha

By failing to prepare, you are preparing to fail

Case Study Form
Enter the Captcha

Take a peek into sample report

Case Study Form
Enter the Captcha

Get Started!

Case Study Form
Enter the Captcha

Subscribe to Our Podcasts

Blog Write For Us

By failing to prepare, you are preparing to fail

Homepage: By failing to prepare, you are preparing to fail
Enter the Captcha

By failing to prepare, you are preparing to fail

Get Started!

Fixed Force

Get Started!

Get Started!

Get Started!

Get Started!

Get Started!

Get Started!

Get Started!

Get Started!

Get Started!

Get Started!

Get Started!

Take a peek into sample report

Get CERT-In Audit

Flex Force

navy_bubble.png