In a race to adopt technology innovations, Banks have increased their exposure to cyber incidents/ attacks thereby underlining the urgent need to put in place a robust cyber security and resilience framework. The Reserve Bank of India has provided guidelines on Cyber Security Framework vide circular.
In many ways, through its circular, RBI holistically addresses several aspects related to cyber security that a bank should put in place. The circular is quite comprehensive in its coverage. It clearly recognises that cyber security focus is distinct from a focus purely on information security.
It has highlighted the urgent need to put in place a robust cyber security/resilience framework to ensure adequate cyber-security preparedness among banks on a continuous basis. The RBI Guidelines related to Cyber Security framework will enable banks to formalize and adopt cyber security policy and cyber crisis management plan. The requirement to share information on cyber security incidents with RBI will also help structure proactive threat identification and mitigation.
Tech9labs’s approach provides “ground truth” on an organization’s current cybersecurity posture (current state), and where the organization should be based on its threat profile (target state). A threat profile is established by examining an organization’s operations, industry vertical, technology profile, and likely adversaries. From that analysis, we provide a comprehensive set of actionable recommendations to move the organization forward in the short, medium, and long term.