Requirement · RBI-ITGRCA-2023-7.4
RBI-ITGRCA-2023 §7.4 · Change and patch management — documented, approved and tested changes (RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices, 2023)
Controls (4)
| Control | Name | Domain |
|---|---|---|
| CHG-01 | Production code changes are peer-reviewed and approved | Change Management |
| CHG-02 | Emergency changes are retrospectively approved | Change Management |
| CHG-03 | Developers have no standing production access; deployments via pipeline only | Change Management |
| VUL-01 | Vulnerabilities are scanned and remediated within SLA | Security Operations |