Skip to content
Orange White and Green abstract
Orange White and Green abstract

News -

Reserve Bank of India issues direction on outsourcing of IT services

The Reserve Bank of India (RBI) has issued a draft Master Direction setting out a risk management framework for the outsourcing of IT services.

The Direction includes regulations on managing related concentration risk, periodic risk assessments and the outsourcing of IT services to foreign service providers.

The new regulations come as regulators across the world are focused on strengthening operational resilience in the financial sector. Among these is the Bank of England, who in April shared a series of proposals focused on outsourcing and third-party risk management within financial market infrastructure firms (FMIs).

Responding to the RBI’s consultation, NCC Group was delighted to offer our observations for strengthening the draft Master Direction, in particular around the importance of continuing to recognise software escrow solutions as part of a comprehensive business continuity plan. Our recommendations include:

  • Working with other regulators globally to do more to promote and educate financial firms on the benefits of cloud, software and technology escrow solutions as a practical means of managing third-party risk.
  • This includes standardising the promotion of cloud, software and technology escrow solutions, bringing the Master Direction in line with other core guidelines overseen by the RBI and its fellow financial regulators.
  • Ensuring that the development and regular testing requirements of business continuity and exit plans form part of licensing or contractual agreements between regulated entities and their third-party suppliers.
  • Greater information sharing to improve shared and contextualised understanding of concentration and cyber risk.

Leading NCC Group’s response to the Bank’s proposals, Wayne Scott, Regulatory Compliance Solutions Lead at NCC Group, said:

“The risks facing financial services are ever evolving, and this requires sound risk management to ensure business continuity. The RBI has been at the forefront of operational resilience, promoting escrow solutions as one of the solutions for ensuring the ongoing provision of important business services.

As RBI finalises its Master Direction, it will be key to ensure that this ‘Resilience by Design’ approach is reflected in guidelines to financial services firms.”



Press contacts

NCC Group Press Office

NCC Group Press Office

Press contact All media enquires relating to NCC Group plc +44 7824 412 405

NCC Group exists to make the world safer and more secure

In today’s threat landscape understanding the risks organisations and customers are exposed to is more important than ever.

Understanding the impact and how to be more resilient is key to protecting brand, reputation and sensitive customer information. Building a cyber-resilient organization can be a complex process but it’s not impossible.

With our knowledge, experience and global footprint, we help assess, develop and manage cyber resilience posture.

NCC Group Newsroom
XYZ Building, 2 Hardman Boulevard, Spinningfield
M3 3AQ Manchester
United Kingdom