RBI IT Governance Master Direction · vMaster Direction on Informa…

RBI IT Governance Master Direction

RBI IT Governance Master Direction — 100% of in-scope requirements covered.

6 requirements · 2 in scope (2 enforced) · 4 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

Source: Reserve Bank of India — Master Direction on Information Technology Governance, Risk, Controls and Assurance Practices

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
RBI IT Governance Master Direction 6 2 0 0 0 100%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
rbi-master-direction-it.AGENT-ACTION-AUTHORITY Consequential actions by automated systems resolve to a live delegated authority enforced audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1
engines: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/52-DELEGATED-AGENT-BINDING.md
rbi-master-direction-it.AUDIT-TRAIL Tamper-evident audit trail over privileged and consequential operations enforced audit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1
constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md
rbi-master-direction-it.IT-GOVERNANCE-STRUCTURE Board-level IT strategy committee and defined governance structure out-of-scope constitution_refs: constitution/18-OPERATING-MODEL.md
rbi-master-direction-it.INFOSEC-PROGRAMME Information-security policy, controls and periodic assessment out-of-scope constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md
rbi-master-direction-it.BUSINESS-CONTINUITY Business continuity and disaster-recovery capability with periodic testing out-of-scope constitution_refs: constitution/51-NO-SPOF.md
rbi-master-direction-it.IT-ASSURANCE Independent assurance and internal audit over IT controls out-of-scope constitution_refs: constitution/21-DELEGATED-AUDITABILITY.md