All Commercial Banks (sector-wide)

The Reserve Bank of India on July 31, 2026 published comprehensive regulatory directions titled 'Commercial Banks – Cybersecurity, Technology: Risk, Resilience and Assurance Framework Directions, 2026.' The framework covers cyber governance and resilience, security operations center operations, incident response and digital forensics, third-party risk management, and board-level accountability for technology and cyber risk. The directions explicitly address third-party risk management, which is critical for banks relying on fintech partners, cloud services, and outsourced technology providers. While not a firm-specific enforcement action, the sector-wide directions impose binding obligations on all commercial banks and indirectly regulate how banks manage fintech and BaaS-style relationships in India.

Verified from source: The Reserve Bank of India released the Commercial Banks – Cybersecurity, Technology: Risk, Resilience and Assurance Framework Directions, 2026 on 31st July 2026, setting a new benchmark for cyber governance, resilience, SOC operations, incident response, digital forensics, third-party risk management, and board-level accountability across commercial banks.