Requirement · RBI-OITS-2023-9
RBI-OITS-2023 §9 · Outsourcing — ongoing monitoring of service providers and incident notification (RBI Master Direction on Outsourcing of Information Technology Services, 2023)
Controls (2)
| Control | Name | Domain |
|---|---|---|
| VEN-01 | Critical third parties are risk-assessed before onboarding and annually | Third-Party Risk |
| VEN-03 | Supplier security incidents are assessed for impact and tracked | Third-Party Risk |