Recorded RBI impact
Fine: Rs 5.00 L
Monetary penalty · Fresh imposition
Published by RBI
18 Apr 2024
Case Brief
RBI, by order dated April 10, 2024, imposed a monetary penalty of ₹5 lakh on The Kangra Co-operative Bank Ltd., New Delhi. The action followed an IT examination and scrutiny, along with inputs from CSIRT-Fin/CERT-In and a CERT-In empanelled auditor, after a cyber security incident reported by the bank. RBI concluded that the bank had failed to comply with the directions on the Basic Cyber Security Framework and the Comprehensive Cyber Security Framework for Primary (Urban) Cooperative Banks, specifically by not putting in place certain mandated controls.
Why RBI Acted
RBI imposed a monetary penalty under section 47A(1)(c) read with sections 46(4)(i) and 56 of the Banking Regulation Act, 1949 after an IT examination and scrutiny, supplemented by findings from CSIRT-Fin/CERT-In and a CERT-In empanelled auditor, in relation to a cyber security incident reported by the bank. RBI found that the charge of not putting in place certain mandated controls under the cyber security framework for UCBs was sustained, constituting non-compliance with the directions issued on the Basic Cyber Security Framework for Primary (Urban) Cooperative Banks and the Comprehensive Cyber Security Framework for Primary (Urban) Cooperative Banks - A Graded Approach.
Operating Impact
The bank must bear the monetary penalty, and the enforcement record may inform further supervisory or enforcement action. There is no stated deposit, lending, or operational restriction in this release; the impact is primarily compliance and reputational, while RBI expressly notes that other action may still be initiated.
Regulatory Basis
- section 47A(1)(c) read with sections 46(4)(i) and 56 of the Banking Regulation Act, 1949
Action Facts
- Primary Impact
- Fine: Rs 5.00 L
- Order Date
- 10 Apr 2024
- Effective From
- 10 Apr 2024
- Entities Affected
- 1
- Entity Role
- Primary
- Entity Type
- Co-operative bank