Lowdown: RBI issues new cybersecurity framework for commercial banks

Download the cybersecurity guidelines from RBI here. Banks must now conduct vulnerability assessments every six months, annual penetration tests for critical internet-facing systems, and half-yearly disaster recovery drills under the Reserve Bank of India’s new cybersecurity framework. The Reserve Bank of India (RBI) on July 31 issued the Reserve Bank of India (Commercial Banks – Cybersecurity, Technology: Risk, Resilience and Assurance Framework) Directions, 2026, replacing the existing patchwo