About CERT-IN
CERT-In (Computer Emergency Response Team - India) was established in 2004 under the Ministry of Electronics and Information Technology (MeitY) to enhance India's cybersecurity posture.
It coordinates responses to cyber incidents, issues vulnerability advisories, and provides real-time threat intelligence.
CERT-In supports sectors like banking, telecom, and government by enhancing resilience through incident response, awareness, and cybersecurity best practices.
Industries Required CERT-IN Empanelled Audits
RBI
Data Localization Audits - SAR Audits (RBI/NPCI)
Ensure strict adherence to RBI and NPCI localization mandates, verifying that payment data remains within India. As per the reference from RBI circular DPSS.CO.OD.No 2785/06.08.005/2017-18 (April 8, 2018) reinforces regulatory and data security standards.
RBI Payment and Settlement Systems (PSS) Compliance Audit
Strengthen compliance with RBI’s Payment and Settlement Systems (PSS) Act, ensuring secure financial transactions. As per RBI circular RBI/2024-2025/99 CO. DPSS.RPPD.No.S987/04.03.001/2024-25, these audits uphold regulatory integrity.
RBI Information Security Compliance
Evaluate banks’ adherence to RBI’s Cyber Security Framework, focusing on risk management, incident response, and governance as per RBI circular DBS.CO/CSITE/BC.11/33.01.001/2015-16, ensuring security governance structure.
RBI IT Governance Master Directions
Evaluate IT risk management, cybersecurity policies, and governance frameworks as mandated by RBI. As per the RBI Circular DoS.CO.CSITEG/SEC.7/31.01.015/2023-24 ensure stronger regulatory compliance in banking operations
RBI Guidelines for PAPGs
Ensures Payment Aggregators and Payment Gateways comply with RBI security requirements to safeguard digital transactions. As per the DPSS.POLC.No.S33/02-14-008/2020-2021, to provide a secure and efficient digital payment ecosystem
RBI Cyber Security Framework for Banks & UCBs
Assesses cybersecurity measures in banks and urban cooperative banks (UCBs) to mitigate cyber threats and financial fraud. Reference is taken from the RBI Circular DBS.CO/CSITE/BC.11/33.01.001/2015-16 for maintaining the security and resilience of the banking system against evolving cyber risks.
RBI Guidelines for NBFC Cyber Security
Audits NBFCs for compliance with RBI cybersecurity mandates, focusing on risk management and data protection. As a CERT-In empanelled auditor with expertise in financial and IT security standards, we provide end-to-end support for NBFCs to meet RBI Cyber Security Guidelines.
Reference No: RBI/DNBS/2016-17/53 DNBS.PPD.No.04/66.15.001/2016-17
RBI NBFC P2P and AA Compliance Audits
As per the RBI circular RBI/2024-25/63 DoR.FIN.REC.35/03.10.124/2024-25, we provide NBFC Peer-to-Peer & Account Aggregator Audit services to ensure compliance with RBI regulations and auditing in India.
ATM Security Audit
Evaluates ATM security controls, including network protection, transaction security, and physical safeguards.
RBI Circular Reference: DoS.CO/CSITE/BC.4084/31.01.015/2019-20
Vendor Security Audit
Assesses third-party vendors’ security controls to mitigate risks associated with outsourced financial services.
RBI PPI Compliance Audit
Audits Prepaid Payment Instrument (PPI) providers for adherence to RBI’s security and operational compliance guidelines.
RBI Circular Reference: RBI/2016-2017/16 DPSS.CO.PD.PPI.No.01/02.14.006/2016-17
System Audit (BBPS/UPI)
RBI mandates BBPS and UPI system audits to verify compliance with payment security standards, as per RBI circulars, ensuring transaction integrity and risk mitigation.
Ref Circular No. RBI/2024-2025/97 CO.DPSS.POLC.No.S972/02-14-006/2024-25
Ref Circular No. RBI/2014-15/327:DPSS.CO.PD. No. 940 / 02.27.020 / 2014-2015
RBI DPSC System Audit
We provide RBI’s Digital Payment Security Controls (DPSC) Audit services as per the RBI Circular RBI/2020-21/74 DoS.CO.CSITE.SEC.No.1852/31.01.015/2020-21 verifies adherence to regulatory guidelines, ensuring the security, efficiency, and reliability of payment and settlement systems.
SEBI
SEBI Cyber Security and Cyber Resilience Framework (CSCRF) Audit
Ensures financial institutions comply with SEBI’s Cyber Security and Cyber Resilience Framework, strengthening defenses against evolving cyber threats.
Circular No. SEBI/HO/ ITD-1/ITD_CSC_EXT/P/CIR/2024/113
SEBI System & Network Security Audit (For Stock Exchanges and Depositories)
We SEBI system and network security audit as per the circular no SEBI/HO/MRD/POD-3/P/CIR/2024/162, ensuring compliance with SEBI regulations and safeguarding market integrity.
SEBI System and Network Audit of Market Infrastructure Institutions (MIIs) – NSE, BSE, and Clearing Corporations
As per the reference Circular No. SEBI/HO/MRD1/MRD1_DTCS/P/CIR/2022 We offers cybersecurity controls in MIIs to ensure the resilience of stock exchanges, clearing corporations, and depositories against cyber risks.
NABARD
NABARD Cyber Security Controls for Third-Party ATMs
As per the RBI circular we RBI/2019-20/130 DoS.CO/CSITE/BC.4084/31.01.015/2019-20 ensures third-party ATMs comply with NABARD-mandated cybersecurity controls, protecting rural banking transactions from fraud and cyber threats.
NABARD Cyber Security Framework for Rural Cooperative Banks
Evaluates cybersecurity measures in rural cooperative banks, ensuring compliance with NABARD’s framework to enhance digital banking security.
As per the Ref. NO. NB. DoS. Pol. HO./3182 / J- 1/2019-20, NABARD put forth a Comprehensive Cyber Security Framework for Rural Cooperative Banks (RCBs)
NABARD Cyber Security Audit for Regional Rural Banks
Assesses cybersecurity resilience in regional rural banks, ensuring adherence to NABARD guidelines for secure financial operations.
As per the Ref. NO. NB. DoS. Pol. HO./3184 / J- 1/2019-20, NABARD put forth a Comprehensive Cyber Security Framework for Regional Rural Banks (RRBs)
IRDA
IRDA Information and Cyber Security Guidelines Compliance Audit
Ensures insurance companies comply with IRDA’s cybersecurity guidelines, safeguarding policyholder data and securing digital insurance operations.
ISNP Security Audit
Evaluate the cybersecurity posture of Insurance Self-Network Platforms (ISNPs), ensuring compliance with IRDA regulations for secure online insurance transactions.
UIDAI
UIDAI Information Security Compliance Audit (As per Aadhaar Act & Regulations)
Ensures entities handling Aadhaar data comply with UIDAI's security mandates, protecting sensitive identity information from unauthorized access and breaches.
UIDAI AUA/KUA Audit
Assesses Authentication User Agencies (AUA) and KYC User Agencies (KUA) for compliance with UIDAI security guidelines, ensuring secure Aadhaar-based authentication and KYC processes.
Ref Circular: K-11022/204/2017-UIDAI (Auth-I)