June 23, 2022<\/p>\n\n\n\n
The Chairman\/Managing Director\/Chief Executive Officer
Scheduled Commercial Banks (excluding Regional Rural Banks);
Local Area Banks;
Small Finance Banks;
Payments Banks;
Primary (Urban) Co-operative Banks having asset size of \u20b91000 crore and above;
Non-Banking Financial Companies in Top, Upper and Middle Layers;
Credit Information Companies; and
All India Financial Institutions (NHB, NABARD, SIDBI, EXIM Bank and NaBFID)<\/p>\n\n\n\n
Madam\/Dear Sir,<\/p>\n\n\n\n
Regulated Entities (REs) have been extensively leveraging Information Technology (IT) and IT enabled services (ITeS) to support their business models and products and services offered to their customers. REs also outsource substantial portion of their IT activities to third parties. Such reliance on IT\/ ITeS provided by third parties expose the REs to significant risks.<\/p>\n\n\n\n
3. Accordingly, in exercise of the powers conferred by Section 35A read with Section 56 of the Banking Regulation Act, 1949; Section 45L of the Reserve Bank of India Act, 1934 and Section 11 of the Credit Information Companies (Regulation) Act, 2005, and all other provisions\/ laws enabling the Reserve Bank of India in this regard, the Reserve Bank proposes to prescribe a Master Direction on Outsourcing of IT Services as given in the Annex, to be implemented by the REs.<\/p>\n\n\n\n
Yours faithfully,<\/p>\n\n\n\n
(T.K.Rajan)
Chief General Manager<\/p>\n\n\n\n