RBI approval is not required for IT outsourcing arrangements, but they should be subject to on-site or off-site monitoring and inspection by regulators.
April 12, 2023The taskforce will assess existing cyber protections, response protocols, and safeguards around third-party service providers.
March 9, 2023Among the key tasks in the workplan, the FSS will work to strengthen governance structures, compensation systems, and internal control capabilities of banks.
February 10, 2023On-site inspection will be initiated "immediately" in the event that financial services are interrupted for more than three hours due to a computer accident.
January 3, 2023Regulated entities will have to obtain source code from vendors for critical applications or ensure a software escrow agreement is in place.
October 24, 2022Regulated entities don't require specific approvals to outsource IT services, but appropriate policies and a risk management framework must be in place.
June 29, 2022E-money can refer to monetary value "electronically stored in an instrument or device" - including cash cards, prepaid cards, stored value cards or digital wallets.
March 15, 2022ASIC wants market participants to be able to re-route trades to alternative venues such as Chi-X in the event of a future market outage.
November 26, 2021APRA found in a data collection exercise that 60 percent of regulated entities had not assessed IT service providers' information security control testing.
November 25, 2021IOSCO's principles on outsourcing have been updated to include trading venues, intermediaries/market participants acting on a proprietary basis, and CRAs.
November 1, 2021