Reserve Bank of India (All India Financial Institutions – Managing Risks in Outsourcing) Directions, 2025

This page is the record of the instrument itself — reference, dates, scope and source. For what it means in practice, read Third-party risk management in Indian BFSI.

The record

What it says

• Binds the five All India Financial Institutions: EXIM Bank, NABARD, NaBFID, NHB and SIDBI.
• Covers material outsourcing of IT services only; the instrument has no financial-services outsourcing chapter.
• Gave existing IT outsourcing agreements until renewal or 10 April 2026, whichever came first; new agreements comply from signing.
• Issued the same day as the other eight members of the outsourcing family, one per entity class.

Read the instrument

The link below goes to the issuing regulator’s own copy. Where a regulator serves its text through a PDF viewer or a query-string URL, it points at the document rather than at a landing page that may not render it.

• RBI/DOR/2025-26/337 — RBI’s own copy

Instruments that change what this one requires

Not a reading list. Each of these alters the obligation on this page — the amendment that moved a date, the sibling that binds the entity class this one excludes, or the separate track it is routinely merged with.

• RBI LAB outsourcing Directions, 2025 RBI/DOR/2025-26/245 — Local Area Banks, for material outsourcing of IT services only.
• All India Financial Institutions RBI/DoS/2026-27/456 — Five institutions by name — EXIM Bank, NABARD, SIDBI, NHB and NaBFID.

This record is one entry in the Indian cyber regulation register, which publishes the same fields for every instrument as an open dataset. Indicative, and not legal advice: whether an instrument reaches your organisation turns on your licences and registrations, and is a determination for your legal team.