RBI IT Governance Master Direction

RBI IT Governance Master Direction — 100% of in-scope requirements covered.

6 requirements · 2 in scope (2 enforced) · 4 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

RBI IT Governance Master Direction: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. AGENT-ACTION-AUTHORITY · enforced

    Consequential actions by automated systems resolve to a live delegated authority

    Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1 · Constitution: 12 purpose permission, 52…

  2. AUDIT-TRAIL · enforced

    Tamper-evident audit trail over privileged and consequential operations

    Audit events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1 · Constitution: 30 audit worm retention

  3. IT-GOVERNANCE-STRUCTURE · out-of-scope

    Board-level IT strategy committee and defined governance structure

    Constitution: 18 operating model

  4. INFOSEC-PROGRAMME · out-of-scope

    Information-security policy, controls and periodic assessment

    Constitution: 30 audit worm retention

  5. BUSINESS-CONTINUITY · out-of-scope

    Business continuity and disaster-recovery capability with periodic testing

    Constitution: 51 no spof

  6. IT-ASSURANCE · out-of-scope

    Independent assurance and internal audit over IT controls

    Constitution: 21 delegated auditability

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: Reserve Bank of India — Master Direction on Information Technology Governance, Risk, Controls and Assurance Practices

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
RBI IT Governance Master Direction62000100%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
rbi-master-direction-it.AGENT-ACTION-AUTHORITYConsequential actions by automated systems resolve to a live delegated authorityenforcedaudit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1
engines: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/52-DELEGATED-AGENT-BINDING.md
rbi-master-direction-it.AUDIT-TRAILTamper-evident audit trail over privileged and consequential operationsenforcedaudit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1
constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md
rbi-master-direction-it.IT-GOVERNANCE-STRUCTUREBoard-level IT strategy committee and defined governance structureout-of-scopeconstitution_refs: constitution/18-OPERATING-MODEL.md
rbi-master-direction-it.INFOSEC-PROGRAMMEInformation-security policy, controls and periodic assessmentout-of-scopeconstitution_refs: constitution/30-AUDIT-WORM-RETENTION.md
rbi-master-direction-it.BUSINESS-CONTINUITYBusiness continuity and disaster-recovery capability with periodic testingout-of-scopeconstitution_refs: constitution/51-NO-SPOF.md
rbi-master-direction-it.IT-ASSURANCEIndependent assurance and internal audit over IT controlsout-of-scopeconstitution_refs: constitution/21-DELEGATED-AUDITABILITY.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.