---
title: "RBI IT Governance Master Direction — KYE Protocol™ coverage"
description: "RBI IT Governance Master Direction coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it."
url: https://kyeprotocol.com/compliance/rbi-master-direction-it/
lang: en
source: "KYE Protocol"
---

> RBI IT Governance Master Direction coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.

RBI IT Governance Master Direction

# RBI IT Governance Master Direction — 100% of in-scope requirements covered.

6 requirements · 2 in scope (2 enforced) · 4 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

**Source:** Reserve Bank of India — Master Direction on Information Technology Governance, Risk, Controls and Assurance Practices

## By category

| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
| --- | --- | --- | --- | --- | --- | --- |
| RBI IT Governance Master Direction | 6 | 2 | 0 | 0 | 0 | **100%** |

## Every requirement → the KYE™ artefact that enforces it

| ID | Title | Status | KYE™ enforcement |
| --- | --- | --- | --- |
| `rbi-master-direction-it.AGENT-ACTION-AUTHORITY` | Consequential actions by automated systems resolve to a live delegated authority | enforced | **audit\_events**: `kye.purpose.admissibility.v1`, `kye.evidence.decision_map.v1`, `kye.evidence.pack.v1`, `kye.replay.context_seal.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md`, `constitution/52-DELEGATED-AGENT-BINDING.md` |
| `rbi-master-direction-it.AUDIT-TRAIL` | Tamper-evident audit trail over privileged and consequential operations | enforced | **audit\_events**: `kye.evidence.pack.v1`, `kye.replay.context_seal.v1`, `kye.compliance.attestation.v1` **constitution\_refs**: `constitution/30-AUDIT-WORM-RETENTION.md` |
| `rbi-master-direction-it.IT-GOVERNANCE-STRUCTURE` | Board-level IT strategy committee and defined governance structure | out-of-scope | **constitution\_refs**: `constitution/18-OPERATING-MODEL.md` |
| `rbi-master-direction-it.INFOSEC-PROGRAMME` | Information-security policy, controls and periodic assessment | out-of-scope | **constitution\_refs**: `constitution/30-AUDIT-WORM-RETENTION.md` |
| `rbi-master-direction-it.BUSINESS-CONTINUITY` | Business continuity and disaster-recovery capability with periodic testing | out-of-scope | **constitution\_refs**: `constitution/51-NO-SPOF.md` |
| `rbi-master-direction-it.IT-ASSURANCE` | Independent assurance and internal audit over IT controls | out-of-scope | **constitution\_refs**: `constitution/21-DELEGATED-AUDITABILITY.md` |

Canonical KYE™ surfaces referenced on this page: [KYE Protocol™](https://kyeprotocol.com/).