Urban co-operative banks must implement cyber security controls according to RBI's graded framework, based on their digital depth and interconnectedness.
We assess your controls against the level that applies to your bank, test your core banking and digital channels, and provide a practical remediation roadmap.
Objectives
- Determine and assess the applicable control level
- Test core banking, internet and mobile banking channels
- Review network security, access control and monitoring
- Evaluate incident response and reporting
Methodology
01
Planning
- Define scope, applicable requirements and critical systems
- Agree audit plan, sampling approach and timelines
02
Fieldwork
- Review of policies, procedures and governance
- Testing of technical and operational controls
- Interviews with process owners and evidence verification
03
Technical testing
- Vulnerability assessment and penetration testing where in scope
- Configuration review of servers, databases and network devices
04
Reporting
- Observations rated by risk with recommendations
- Management responses and follow-up review
Deliverables
Audit plan and scope
Audit report with risk-rated observations
VAPT report where in scope
Remediation plan and follow-up review