The Ministry of Electronics and Information Technology has declared specific computer resources of YES Bank as 'protected systems' under the Information Technology Act, 2000. This designation is due to YES Bank's critical information infrastructure status.
The protected systems include those related to Core Banking Solution, Real Time Gross Settlement (RTGS), National Electronic Fund Transfer (NEFT), Immediate Payment Service (IMPS) Switch, and Unified Payments Interface (UPI) Switch.
The notification also specifies authorized personnel who can access these protected systems.
Key Changes
The Central Government, using powers under Section 70(1) and 70(2) of the Information Technology Act, 2000, has declared certain computer resources of YES Bank as protected systems.
The declaration covers computer resources related to key banking functions: Core Banking Solution, Real Time Gross Settlement, National Electronic Fund Transfer, Immediate Payment Service Switch, and Unified Payments Interface Switch.
Access to these protected systems is restricted to: designated YES Bank employees authorized in writing, team members of contractual managed service providers or third-party vendors authorized in writing by YES Bank for need-based access, and consultants, regulators, Government officials, auditors, and stakeholders authorized in writing by YES Bank on a case-by-case basis.
The notification is effective from the date of its publication in the Official Gazette, which is July 26, 2023.
Impact Analysis
YES Bank
Action Item: YES Bank needs to establish and maintain stringent access controls and monitoring mechanisms for the declared protected systems. It should also document and regularly review authorization procedures.
Customers of YES Bank
Action Item: YES Bank should communicate these enhanced security measures to its customers to build trust and confidence.
Managed Service Providers and Third-Party Vendors
Action Item: Managed service providers and vendors must ensure compliance with YES Bank's authorization procedures and security requirements. They should also be prepared for audits and assessments.
Regulators and Government Officials
Action Item: Regulators and government officials should coordinate with YES Bank to obtain the necessary written authorization before accessing the protected systems.
Key Entities Referenced
Ministry of Electronics and Information Technology: The issuing authority of the notification, responsible for policies related to electronics and information technology.
YES Bank: The bank whose specific computer resources are declared as 'protected systems'.
Information Technology Act, 2000: The primary legislation under which the notification is issued, providing the legal framework for information technology and cybersecurity.
Core Banking Solution: The central system used by a bank to manage its core operations such as accounts, transactions, and customer data.
Real Time Gross Settlement (RTGS): A system for transferring funds between banks in real-time on a gross basis.
National Electronic Fund Transfer (NEFT): A system for transferring funds electronically from one bank account to another.
Immediate Payment Service (IMPS): An instant real-time payment system for transferring funds.
Unified Payments Interface (UPI): A real-time payment system that allows users to transfer money between bank accounts using a mobile app.
रजिस्ट्री स.ं डी.एल.- 33004/99 REGD. No. D. L.-33004/99
सी.जी.-डी.एल.-अ.-26072023-247621
xxxGIDHxxx
CG-DL-E-26072023-247621
xxxGIDExxx
असाधारण
EXTRAORDINARY
भाग II—खण् ड 3—उप-खण्ड (ii)
PART II—Section 3—Sub-section (ii)
प्राजधकार स ेप्रकाजित
PUBLISHED BY AUTHORITY
स.ं 3202] नई ददल्ली, बुधवार, िुलाई 26, 2023/िावण 4, 1945
No. 3202] NEW DELHI, WEDNESDAY, JULY 26, 2023/SHRAVANA 4, 1945
इलक्टे र ॉजनक ूर सपू ना प्रोगिकीजगक मलं ालय
अजधसपू ना
नई ददल्ली, 26 िुलाई, 2023
का.आ. 3347(अ).—केंद्रीय सरकार, सूपना प्रोगिकीजगक अजधजनयम, 2000 (2000 का 21) क धारा 70 क
उप-धारा (1) ूर उप-धारा (2) द्वारा प्रदत्त िजियों का प्रयीग करत े हुए, यस बैंक क नािुक सूपना अवसंरपना हीने के
कारण महत्वपूणण बैंककारी समाधान (कीर बैंककग सील्यूिन), वास्ट्तजवक समय समग्र जनपटान (ररयल टाइम ग्रॉस सेटलमेंट),
राष्ट्रीय इलैक्टरीजनक जनजध अंतरण (नेिनल इलेक्टरॉजनक फंड रांसफर), तुरंत भुगतान सेवा जस्ट्वप (इमीजडएट पेमेंट सर्ववस
जस्ट्वप) ूर एक कृत भुगतान इंटरफेस जस्ट्वप (यूजनफाइड पेमट्ेंस इंटरफेस जस्ट्वप) स े संबंजधत कंप्यूटर संसाधनों एव ं इसके
सहयुि आजितताओं के कंप्यूटर संसाधनों की उि अजधजनयम के प्रयीिन के जलए एतद्द्वारा संरजित प्रणाली घीजित करती
ह ै ूर जनम्नजलजखत कार्वमकों की संरजित प्रणाजलयों तक पहुपं बनाने के जलए प्राजधकृत करती ह,ै अथाणत ् :-
(क) संरजित प्रणाली तक पहुपं बनाने के जलए, यस बैंक द्वारा जलजखत रूप म ें प्राजधकृत यस बैंक का कीई अजभजहत
कमणपारी;
(ख) संजवदात्मक प्रबंजधत सेवा-प्रदाता या तृतीय पिकार जवक्रेता के दल का कीई सदस्ट्य जिसे आवश्यकता के
आधार पर पहुपं बनाने के जलए यस बैंक द्वारा जलजखत रूप म ें प्राजधकृत दकया गया ह;ै ूर
(ग) मामला दर मामला के आधार पर, यस बैंक द्वारा जलजखत रूप म ें प्राजधकृत कीई परामिी, जवजनयामक,
सरकारी पदाजधकारी, संपरीिक ूर पणधारी।
2. यह अजधसूपना रािपल में इसके प्रकािन क जतजथ स ेप्रभावी हीगी।
[फा. सं. 2(5)/2022-सीएल]
संदीप पटिी, वैज्ञाजनक िी
4822 GI/2023 (1)2 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II—SEC. 3(ii)]
MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY
NOTIFICATION
New Delhi, the 26th July, 2023
S.O. 3347(E).—In exercise of the powers conferred by sub-sections (1) and (2) of section 70 of the
Information Technology Act, 2000 (21 of 2000), the Central Government hereby declares the computer resources
relating to the Core Banking Solution, Real Time Gross Settlement, National Electronic Fund Transfer, Immediate
Payment Service Switch and Unified Payments Interface Switch, being Critical Information Infrastructure of the YES
Bank, and the computer resources of its associated dependencies, to be protected systems for the purpose of the said
Act and authorises the following personnel to access the protected systems, namely:—
(a) any designated employee of the YES Bank authorised in writing by the YES Bank to access the
protected system;
(b) any team member of contractual managed service provider or third-party vendor who have been
authorised in writing by the YES Bank for need-based access; and
(c) any consultant, regulator, Government official, auditor and stakeholder authorised in writing by the
YES Bank on case to case basis.
2. This notification shall come into force on the date of its publication in the Official Gazette.
[F. No. 2(5)/2022-CL]
SANDIP CHATTERJEE, Scientist G
Uploaded by Dte. of Printing at Government of India Press, Ring Road, Mayapuri, New Delhi-110064
and Published by the Controller of Publications, Delhi-110054.