RBI Cybersecurity Compliance Checklist
1. Cyber Security Policy endorsed by the Board
Write down a clear policy on threats, risks, and tactics. Reports to the CSITE Cell of Tell RBI when it is ready.
2. Security Operations Centre (SOC)
Establish a SOC to carry out 24/7 surveillance, intelligence of threats, and detection of anomalies.
3. Network and Database Security
Check connections; sever illegal entry. Apply micro- segmentation and artificial intelligence surveillance.
4. Vulnerability and Vulnerability Management
Fast, particularly when there is a familiar adventure. Run VA/PT cycle wide.
5. Application Security Lifecycle
Secure coding, threat modelling, OWASP. Separate dev, test, and prod.
6. Data Protection Measures
Protect data on rest and in transit; prevent leaks with DLP. Intelligence test backups and restores.
7. Authentication and Access
Access control, multifactor authentication, passwords. Record watch logins and kill inactive accounts.
8. Environmental and Physical Controls
Install cameras on secure DCs/ DRs, monitor breaches.
9. Training and Awareness
Train personnel on hazards, train boards. Diffuse cyber hygiene among stakeholders.
10. Business Continuity and DR
Test BCP/DR after every 6 months; strike low RTO/RPO. Include vendor testing.
11. Audit and Metrics
Monitor such KPIs as patch lag and malware coverage. ACB audits Run IS.
12. Forensics and Reporting
Analyse the cases, disseminate through IB-CART.

Resource: https://qualysec.com/rbi-cybersecurity-compliance-checklist/