India: NPCI issues statement on cybersecurity defence and data privacy
The National Payments Corporation of India ('NPCI') issued, on 31 July 2020, a statement on cybersecurity defence and data privacy. In particular, the NPCI noted that it invests in people, process, and technologies required to safeguard the IT infrastructure, information generated by them, and the digital identities that access such information to remain safe and secured by deploying state-of-the-art technologies for protection and monitoring. In addition, the NPCI highlighted the importance of security practices including secured software coding, regular internal audits, continuous vulnerability assessment and penetration testing, third-party audits, and surprise cubersecurity drills. Moreover, the NPCI noted that it has adopted its Security Framework in line with the National Institute of Standards and Technology ('NIST') Cybersecurity Framework and Payment Card Industry ('PCI') Data Security Standard.
You can read the press release here.