Date: 22-Oct-2024Category: Extra OrdinaryState: Union GovernmentCountry: India
Notification (Extraordinary) regarding declaration of certain computer resources relating to identified Critical Information Infrastructures (CIIs) of the IndusInd Bank Ltd. and the computer resources of their associated dependencies as protected systems
This gazette notification from the Ministry of Electronics and Information Technology declares certain IndusInd Bank Ltd. computer resources as 'protected systems' under the Information Technology Act, 2000.
Key Changes
The notification designates IndusInd Bank Ltd.'s computer resources related to Core Banking Solution (CBS), Real Time Gross Settlement (RTGS), National Electronic Fund Transfer (NEFT), Immediate Payment Service Switch (IMPS), Unified Payments Interface (UPI) Switch, Automated Teller Machine (ATM) Switch, and Society for Worldwide Interbank Financial Telecommunications Systems (SWIFT) as protected systems.
It specifies who can access these protected systems: designated IndusInd Bank employees, authorized personnel from contracted service providers or third-party vendors, and authorized consultants, regulators, government officials, auditors, and stakeholders (all requiring written authorization from IndusInd Bank).
The notification comes into effect on the date of its publication in the Official Gazette (October 22, 2024).
Impact Analysis
IndusInd Bank Ltd.
Potential increase in compliance costs associated with maintaining the protected system status.
Contracted Service Providers and Third-Party Vendors
Increased scrutiny and security audits.
Consultants, Regulators, Government Officials, Auditors, and Stakeholders
Increased need for clear communication and coordination with IndusInd Bank regarding access requests.
Cybersecurity
Potential for increased investment in cybersecurity technologies and personnel.
Key Entities Referenced
IndusInd Bank Ltd.: The bank whose critical information infrastructure is declared as protected systems.
Ministry of Electronics and Information Technology: The issuing authority of the gazette notification.
Information Technology Act, 2000: The law under which the notification is issued, providing the legal framework for protecting computer resources.
Core Banking Solution (CBS), Real Time Gross Settlement (RTGS), National Electronic Fund Transfer (NEFT), Immediate Payment Service Switch (IMPS), Unified Payments Interface (UPI) Switch, Automated Teller Machine (ATM) Switch, and Society for Worldwide Interbank Financial Telecommunications Systems (SWIFT): Specific computer resources of IndusInd Bank Ltd. designated as protected systems.
रजिस्ट्री स.ं डी.एल.- 33004/99 REGD. No. D. L.-33004/99
सी.जी.-डी.एल.-अ.-22102024-258149
CG-DxLx-xEG-I2D2H1x0x2x0 24-258149
xxxGIDExxx
असाधारण
EXTRAORDINARY
भाग II—खण् ड 3—उप-खण्ड (ii)
PART II—Section 3—Sub-section (ii)
प्राजधकार स ेप्रकाजित
PUBLISHED BY AUTHORITY
स.ं 4249] िई दिल्ली, मगं लवार, अक्टत बू र 22, 2024/आजव ि 30, 1946
No. 4249] NEW DELHI, TUESDAY, OCTOBER 22, 2024/ASVINA 30, 1946
इलक्टे र ॉजिकी और सचू िा प्रौद्योजगकी मत्रं ालय
अजधसचू िा
िई दिल् ली, 22 अक्ट तूबर, 2024
का.आ. 4623(अ).—केंद्रीय सरकार, सूचिा प्रौद्योजगकी अजधजियम, 2000 (2000 का 21) (जिस े इसम ें इसके
पश्चात उक्त अजधजियम कहा गया ह)ै की धारा 70 की उप-धारा (1) और उप-धारा (2) द्वारा प्रित्त िजक्तयों का प्रयोग करत े
हुए, इंडसइंड बैंक जलजमटेड की िािुक सूचिा अवसंरचिा होिे के कारण महत्वपूणण बैंककारी समाधाि (कोर बैंककंग सोल्यूिि),
वास्ट्तजवक समय समग्र जिपटाि (ररयल टाइम ग्रॉस सेटलमेंट), राष्ट्रीय इलैक्टरोजिकी जिजध अंतरण (ििे िल इलेक्टरॉजिक फंड
रांसफर), तुरंत भुगताि सेवा जस्ट्वच (इमीजडएट पेमेंट सर्वणस जस्ट्वच), एकीकृत भुगताि इंटरफेस जस्ट्वच (यूजिफाइड पेमेंट्स
इंटरफेस जस्ट्वच), स्ट्वचाजलत टेलर मिीि जस्ट्वच (ऑटोमेरटड टेलर मिीि जस्ट्वच) और सोसाइटी फॉर वल्डण वाइड इंटर बैंक
फाइिेंजियल टेलीकम्यूजिकेिि जसस्ट्टम्स स े संबंजधत कंप्यूटर ससं ाधिों एव ं उिस े सहयुक्त आजितताओं के कंप्यूटर संसाधिों
को उक्त अजधजियम के प्रयोििों के जलए एतद्द्वारा संरजित प्रणाली घोजित करती ह ै और जिम्नजलजखत व्यजक्तयों को संरजित
प्रणाजलयों तक पहुचं बिािे के जलए प्राजधकृत करती ह,ै अर्ाणत :-
(क) संरजित प्रणाली तक पहुचं बिािे के जलए, इंडसइंड बैंक जलजमटेड द्वारा जलजखत रूप म ें प्राजधकृत इंडसइंड बैंक
जलजमटेड का कोई अजभजहत कमचण ारी;
6886 GI/2024 (1)2 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II—SEC. 3(ii)]
(ख) संजविात्मक प्रबंजधत सेवा-प्रिाता या तृतीय पिकार जवक्रेता के िल का कोई सिस्ट्य जिसे आवयकता के आधार
पर पहुचं बिाि े के जलए इंडसइंड बैंक जलजमटेड द्वारा जलजखत रूप म ेंप्राजधकृत दकया गया ह;ै और
(ग) मामला िर मामला के आधार पर, इंडसइंड बैंक जलजमटेड द्वारा जलजखत रूप म ें प्राजधकृत कोई परामिी,
जवजियामक, सरकारी पिाजधकारी, संपरीिक और पणधारी।
2. यह अजधसूचिा रािपत्र म ेंइसके प्रकािि की जतजर् स ेप्रभावी होगी।
[फा. सं. 2(5)/2022-सीएल-भाग(2)]
िीपक गोयल, वैज्ञाजिक िी
MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY
NOTIFICATION
New Delhi, the 22nd October, 2024
S.O. 4623(E).—In exercise of the powers conferred by sub-sections (1) and (2) of section 70 of the Information
Technology Act, 2000 (21 of 2000) (hereinafter referred to as the said Act), the Central Government hereby declares
the computer resources relating to the Core Banking Solution (CBS), Real Time Gross Settlement (RTGS), National
Electronic Fund Transfer (NEFT), Immediate Payment Service Switch (IMPS), Unified Payments Interface (UPI)
Switch, Automated Teller Machine (ATM) Switch and Society for Worldwide Interbank Financial Telecommunications
Systems (SWIFT), being Critical Information Infrastructure of the IndusInd Bank Ltd., and the computer resources of
their associated dependencies, to be protected systems for the purposes of the said Act and authorises the following
persons to access the protected systems, namely:—
(a) any designated employee of the IndusInd Bank Ltd. authorised in writing by the IndusInd Bank Ltd. to
access the protected system;
(b) any team member of contractual managed service provider or third-party vendor who have been authorised
in writing by the IndusInd Bank Ltd. for need-based access; and
(c) any consultant, regulator, Government official, auditor and stakeholder authorised in writing by the IndusInd
Bank Ltd. on case-to-case basis.
2. This notification shall come into force on the date of its publication in the Official Gazette.
[F. No. 2(5)/2022-CL-Part(2)]
DEEPAK GOEL, Scientist G
Uploaded by Dte. of Printing at Government of India Press, Ring Road, Mayapuri, New Delhi-110064
and Published by the Controller of Publications, Delhi-110054.