Skip to content

RBI IT Framework for NBFCs

The Reserve Bank of India (RBI) Information Technology Framework for Non-Banking Financial Companies (NBFCs) establishes IT governance, security, and risk management requirements for non-banking financial institutions in India. This framework covers areas including IT strategy, cybersecurity, business continuity, and outsourcing arrangements for NBFCs. It applies to all deposit-taking and systemically important non-deposit taking NBFCs regulated by the Reserve Bank of India.

Terraform Registry Subdomain: rbiitfnbfc

module "..." {
  source  = "rbiitfnbfc.compliance.tf/terraform-aws-modules/<module>/aws"
  version = "<version>"
}

module "..." {
  source = "https://rbiitfnbfc.compliance.tf/terraform-aws-modules/<module>/aws"
}

Refer to the Terraform Registry Endpoints section for more details.

Implemented Controls

The following controls are implemented as part of this framework.

Enable/Disable Controls

You can customize the Terraform module for the desired compliance requirements by enabling/disabling individual controls.

Examples

S3 bucket module with RBI IT Framework for NBFCs compliance framework controls enabled, and a couple of controls disabled

module "..." {
  source = "https://rbiitfnbfc.compliance.tf/terraform-aws-modules/s3-bucket/aws?disable=apigateway_rest_api_stage_use_ssl_certificate,apigateway_stage_logging_enabled"
}