Cyber Security Awareness Program as Per RBI Guideline For NBFC Sector

Information Security

• Identification and Classification of Information Assets
• Segregation of functions
• Role based Access Control
• Personnel Security
• Physical Security
• Maker-checker
• Incident Management
• Trails
• Public Key Infrastructure (PKI)

Cyber Security

• Need for a Board approved Cyber-security Policy
• Vulnerability Management
• Cyber security preparedness indicators
• Cyber Crisis Management Plan
• Sharing of information on cyber-security incidents with RBI
• Cyber-security awareness among stakeholders / Top Management / Board
• Digital Signatures
• IT Risk Assessment
• Mobile Financial Services
• Social Media Risks

IS Audit

• Policy for Information System Audit (IS Audit)
• Coverage
• Personnel
• Periodicity
• Reporting
• Compliance
• Computer-Assisted Audit Techniques (CAATs)

Business Continuity Planning

• Business Impact Analysis
• Recovery Strategy / Contingency Planning

Assessment and Certification (based on Online Quiz etc.)

a. MCQ Based Assessment