Ministry : Ministry of Electronics and Information Technology (Not Applicable)

Part II-Section 3-Sub-Section (ii)

Subject : Extra Ordinary

Overview [Gazette of India: Extraordinary, Part II]

This is a critical notification under the Information Technology Act, 2000, designating the Core Banking Solution (CBS), Real Time Gross Settlement (RTGS), and Unified Payments Interface (UPI) Switch of Karur Vysya Bank as Critical Information Infrastructure (CII), thereby mandating strict access controls and protection measures.

Key Points

• Notification issued under Section 70 of the Information Technology Act, 2000 (IT Act).
• Declares specific computer resources of Karur Vysya Bank—including CBS, RTGS, and UPI Switch—as protected systems.
• Authorizes limited, need-based access to these protected systems for:
• Designated bank employees with written authorization.
• Contractual or third-party vendor team members requiring access.
• Consultants, regulators, government officials, auditors, and stakeholders on a case-by-case basis.
• The notification comes into force immediately upon publication in the Official Gazette.

Summary

This gazette notification designates Karur Vysya Bank’s core banking, settlement, and payments infrastructure as Critical Information Infrastructure under the IT Act, thereby subjecting these systems to enhanced security and access controls. By restricting system access to authorized personnel and vetted third parties, the move aims to safeguard financial stability, ensure operational resilience, and mitigate cyber risks to critical banking infrastructure, with implications for regulatory compliance and cross-sector digital security.