The notification declares specific computer resources of IDBI Bank Ltd. as 'protected systems' under the Information Technology Act, 2000. These resources are related to Core Banking Solution, Real Time Gross Settlement (RTGS), National Electronic Fund Transfer (NEFT), and Unified Payments Interface (UPI) Switch, recognizing them as Critical Information Infrastructure.
The notification also specifies who is authorized to access these protected systems.
Key Changes
IDBI Bank Ltd.'s computer resources pertaining to Core Banking Solution, Real Time Gross Settlement, National Electronic Fund Transfer and Unified Payments Interface Switch are now designated as 'protected systems'.
Access to these protected systems is restricted to: designated employees of IDBI Bank Ltd. authorized in writing; team members of contractual managed service providers or third-party vendors authorized in writing by IDBI Bank Ltd. for need-based access; and consultants, regulators, Government officials, auditors and stakeholders authorized in writing by IDBI Bank Ltd. on a case-by-case basis.
The notification is effective from the date of its publication i.e. July 26, 2023.
Impact Analysis
IDBI Bank Ltd.
Action Item: Implement a formal authorization process for granting access to the specified computer resources, ensuring that all access is documented and auditable.
Managed Service Providers and Third-Party Vendors
Action Item: Ensure that all personnel accessing IDBI Bank Ltd.'s protected systems are aware of and comply with the bank's security policies and procedures.
Regulators, Government Officials, Auditors and Stakeholders
Action Item: Be prepared to demonstrate compliance with IDBI Bank Ltd.'s security policies and procedures when accessing the protected systems.
Customers of IDBI Bank Ltd.
No direct action required.
Key Entities Referenced
Central Government: Issued the notification under the powers conferred by sub-sections (1) and (2) of section 70 of the Information Technology Act, 2000.
Ministry of Electronics and Information Technology: The ministry responsible for issuing the notification.
IDBI Bank Ltd.: The bank whose specified computer resources are declared as 'protected systems'.
Information Technology Act, 2000: The legislation under which the notification is issued, specifically section 70, which deals with protected systems.
Core Banking Solution: The central system that manages the bank's core operations, including account management, transaction processing, and reporting.
Real Time Gross Settlement (RTGS): A system for transferring funds electronically in real-time.
National Electronic Fund Transfer (NEFT): A system for transferring funds electronically between banks.
Unified Payments Interface (UPI) Switch: A real-time payment system that facilitates instant fund transfers between two bank accounts on a mobile platform.
रजिस्ट्री स.ं डी.एल.- 33004/99 REGD. No. D. L.-33004/99
xxxGIDHxxx
सी.जी.-डी.एल.-अ.-26072023-247617
xxxGIDExxx
CG-DL-E-26072023-247617
असाधारण
EXTRAORDINARY
भाग II—खण् ड 3—उप-खण्ड (ii)
PART II—Section 3—Sub-section (ii)
प्राजधकार स ेप्रकाजित
PUBLISHED BY AUTHORITY
स.ं 3199] औई दिल्ली, बुधवार, िुलाई 26, 2023/िावण 4, 1945
No. 3199] NEW DELHI, WEDNESDAY, JULY 26, 2023/SHRAVANA 4, 1945
इलक्टे र ॉजऔक ूर सप औा प्रोगिकीजगक रलं ालय
अजधसप औा
औई दिल्ली, 26 िुलाई, 2023
का.आ. 3344(अ).—केंद्रीय सरकार, स पऔा प्रोगिकीजगक अजधजऔयर, 2000 (2000 का 21) क धारा 70 क
उप-धारा (1) ूर उप-धारा (2) द्वारा प्रित्त िजियों का प्रयीग करत े हुए, आईडीबीआई बैंक जल. क औािुक स पऔा
अवसंरपऔा हीऔे के कारण रहत्वप णण बैंककारी सराधाऔ (कीर बैंककंग सील्यि औ), वास्ट्तजवक सरय सरग्र जऔपटाऔ (ररयल
टाइर ग्रॉस सेटलरेंट), राष्ट्रीय इलैक्टरीजऔक जऔजध अंतरण (औेिऔल इलेक्टरॉजऔक फंड रांसफर) ूर एक कृत भुगताऔ
इंटरफेस जस्ट्वप (य जऔफाइड पेरट्ेंस इंटरफेस जस्ट्वप) से संबंजधत कंप्य टर संसाधऔों एवं इसके सहयुि आजितताओं के कंप्य टर
संसाधऔों की उि अजधजऔयर के प्रयीिऔ के जलए एतद्द्वारा संरजित प्रणाली घीजित करती ह ै ूर जऔम्नजलजखत कार्रणकों की
संरजित प्रणाजलयों तक पहुपं बऔाऔे के जलए प्राजधकृत करती ह,ै अर्ाणत् :-
(क) संरजित प्रणाली तक पहुपं बऔाऔे के जलए, आईडीबीआई बैंक जल. द्वारा जलजखत रूप र ें प्राजधकृत
आईडीबीआई बैंक जल. का कीई अजभजहत करणपारी;
(ख) सजं विात्रक प्रबंजधत सेवा-प्रिाता या ततृ ीय पिकार जवक्रेता के िल का कीई सिस्ट्य जिसे आवश्यकता के
आधार पर पहुपं बऔाऔे के जलए आईडीबीआई बैंक जल. द्वारा जलजखत रूप र ेंप्राजधकृत दकया गया ह;ै ूर
(ग) रारला िर रारला के आधार पर, आईडीबीआई बैंक जल. द्वारा जलजखत रूप र ें प्राजधकृत कीई परारिी,
जवजऔयारक, सरकारी पिाजधकारी, संपरीिक ूर पणधारी।
2. यह अजधस पऔा रािपल रें इसके प्रकािऔ क जतजर् स ेप्रभावी हीगी।
[फा. सं. 2(5)/2022-सीएल]
संिीप पटिी, वैज्ञाजऔक िी
4817 GI/2023 (1)2 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II—SEC. 3(ii)]
MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY
NOTIFICATION
New Delhi, the 26th July, 2023
S.O. 3344(E).—In exercise of the powers conferred by sub-sections (1) and (2) of section 70 of the
Information Technology Act, 2000 (21 of 2000), the Central Government hereby declares the computer resources
relating to the Core Banking Solution, Real Time Gross Settlement, National Electronic Fund Transfer and Unified
Payments Interface Switch, being Critical Information Infrastructure of the IDBI Bank Ltd., and the computer
resources of its associated dependencies, to be protected systems for the purpose of the said Act and authorises the
following personnel to access the protected systems, namely:—
(a) any designated employee of the IDBI Bank Ltd. authorised in writing by the IDBI Bank Ltd. to access
the protected system;
(b) any team member of contractual managed service provider or third-party vendor who have been
authorised in writing by the IDBI Bank Ltd. for need-based access; and
(c) any consultant, regulator, Government official, auditor and stakeholder authorised in writing by the
IDBI Bank Ltd. on case to case basis.
2. This notification shall come into force on the date of its publication in the Official Gazette.
[F. No. 2(5)/2022-CL]
SANDIP CHATTERJEE, Scientist G
Uploaded by Dte. of Printing at Government of India Press, Ring Road, Mayapuri, New Delhi-110064
and Published by the Controller of Publications, Delhi-110054.