Requirement · RBI-DPSC-2021-4
RBI-DPSC-2021 §4 · Digital payment security — application security, API security, transaction authentication (RBI Master Direction on Digital Payment Security Controls, 2021)
Controls (3)
| Control | Name | Domain |
|---|---|---|
| ENC-01 | Customer and payment data encrypted at rest and in transit | Data Protection |
| PAY-01 | Payment APIs secured with mTLS, signing and customer 2FA | Payments Security |
| PAY-02 | Payment release requires maker-checker | Payments Security |