Control · KYC-02
Periodic KYC updation based on customer risk
Customer OnboardingISO 27001 · RBIRisk High
Requirement to validation
Requirement
ISO-A.5.31 · RBI-KYC-MD-2016-38
mapped
Policy
KYC / AML Policy
pol-kyc
Control
KYC-02
Periodic KYC updation based on customer risk
Application
Salesforce (Sales + Financial Services Cloud)
mapped
Evidence · Q3
0 items
0 approved · 0 pending · 0 rejected
Test · Q3
Not tested
Finding
None
Action
None
Validation
Not planned
What should be true
KYC for existing customers is refreshed per risk category (high: 2 years, medium: 8 years, low: 10 years); overdue refreshes are escalated and transactions restricted after notice.
- Requirements
- ISO-A.5.31 A.5.31 · Legal, statutory, regulatory and contractual requirementsRBI-KYC-MD-2016-38 RBI-KYC-MD-2016 §38 · Periodic updation of KYC based on customer risk category (RBI Master Direction — Know Your Customer (KYC) Direction, 2016 (updated))
- Applications
- Salesforce (Sales + Financial Services Cloud)
- Third parties
- VeriKYC Solutions Pvt. Ltd.
- Testing procedure
- Salesforce report + continuous monitoring check. Tests: Salesforce (Sales + Financial Services Cloud): No high-risk customers overdue for KYC refresh. Frequency monthly.
Findings (0)
○ No data available
Evidence (0)
○ No data available
Tests (0)
○ No data available