Experts in the industry have praised the Reserve Bank of India's (RBI) new regulations on outsourcing IT services by banking sector entities. The RBI's move is intended to enhance corporate governance and protect the interests of consumers, according to the experts. These regulations have been implemented because of the current practice of regulated entities' (REs) extensive usage of IT and IT-enabled services (ITeS) to support their business models and to provide services to their customers.
Beginning October 1, 2023, the Master Direction on "Outsourcing of Information Technology Services" will take effect, according to the Reserve Bank of India (RBI). The RBI aims to ensure that the outsourcing of IT services by regulated entities (REs) does not impede their ability to fulfil their obligations to customers or hinder the RBI's effective supervision, as stated in the Master Direction.
Monish G Chatrath, Managing Partner at MGC Global Risk Advisory LLP, commented that robust corporate governance practices and comprehensive risk management frameworks are critical to enhancing the resilience of the banking, financial services, and insurance (BFSI) sector in India. He also stated that the RBI's directive has brought under purview those IT and ITeS tasks that have the potential to significantly impact the business operations of REs in the event of a disruption or compromise and those that can have a material impact on the customers of the REs in the event of any unauthorized access, loss, or theft of customer information.
Siddhartha Tipnis, Partner at Deloitte India, mentioned that the RBI's regulations provide a foundational framework for regulated entities to manage their technology outsourcing relationships across the continuum. He also said that this framework will bring much more rigour to how REs manage these business-critical relationships and is expected to mature their operating models, processes, and systems, and streamline/formalise some intuitively followed practices around technology outsourcing.
As per the Master Direction, an RE that intends to outsource any of its IT activities will have to establish a comprehensive board-approved IT outsourcing policy. The policy should include the roles and responsibilities of the board, committees of the board, senior management, IT function, business function, as well as oversight and assurance functions concerning the outsourcing of IT services. Shreya Suri, a Partner at IndusLaw, said that the master directions attempt to streamline and unify the regulations for all REs.
Overall, industry experts believe that the RBI's new regulations will enhance corporate governance and safeguard consumers' interests. They anticipate that this topic will be a crucial item on the Board agenda this season, with less than 180 days left for the directives to become effective, and various key RE committees/groups are expected to oversee implementation.
