The National Bank for Agriculture and Rural Development (NABARD) on December 17, 2024, issued a notification regarding the Conduct of Vulnerability Assessment/Penetration Testing (VA/PT) by CERTIn Empanelled Auditors.
The following has been stated: -
•Banks are advised to conduct Vulnerability Assessment/Penetration Testing (VA/PT) for internet-facing applications, servers, and network components at least once every six months for critical applications and annually for penetration testing.
•These tests should be conducted through CERT-In empaneled organizations, as directed by NABARD's Board of Supervision for StCBs, DCCBs, and RRBs. Vulnerabilities identified must be promptly remedied and validated to prevent exploitation.
•The list of CERT-In empaneled organizations is available on CERT-In's website.
The detailed notification is given in the document below.
[Notification No. EC No. 309/DoS-27/2024]
