Requirement · RBI-OITS-2023-6
RBI-OITS-2023 §6 · Outsourcing of IT services — due diligence, contractual clauses (data, audit rights) (RBI Master Direction on Outsourcing of Information Technology Services, 2023)
Controls (2)
| Control | Name | Domain |
|---|---|---|
| VEN-01 | Critical third parties are risk-assessed before onboarding and annually | Third-Party Risk |
| VEN-02 | Provider contracts include data protection and RBI audit clauses | Third-Party Risk |