Agent 39 / 40 · CISO · CTO · DPDP
Vendor & Outsourcing Risk
Scores IT outsourcing and third-party risk.
Skills
- ◆ Vendor risk scoring
- ◆ Contract clause checks
- ◆ Due diligence tracking
- ◆ Exit plan readiness
Time window to tackle
6 weeks
14 days10 weeks
Risk mitigation prime
Controls risk from outsourced services.
CXO position — prime lead
Chief Information Security Officer (CISO)
Regulator
RBI (Cyber security & IT directions) · CERT-In · DPDP Act 2023
Penalty clause
The DPDP Act allows penalties up to ₹250 crore per breach; CERT-In directions under Section 70B of the IT Act carry penalties for non-reporting; RBI can penalise IT and cyber security lapses.
Indicative summary for awareness — verify against the current Act, regulation and circular.