RBI regulatory changes are assessed for impact within 30 days

Each new RBI circular or master direction is logged, assessed within 30 days for impact on policies, controls, processes, applications and third parties, and resulting actions are tracked.

Requirements

ISO-A.5.31 A.5.31 · Legal, statutory, regulatory and contractual requirements

RBI-ITGRCA-2023-3 RBI-ITGRCA-2023 §3 · IT Governance — Board-approved IT strategy; IT Strategy Committee oversight (RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices, 2023)

SOC2-CC3.4 CC3.4 · Identifies and assesses changes that could impact internal control

Policy

pol-itgov · IT Governance Policy (RBI-aligned)

Applications

Meridian Customer Portal

Third parties

—

Testing procedure

Prismet regulatory change register; impact linked to controls. Tests: Meridian Customer Portal: Regulatory change register up to date. Frequency on-demand.