Certification Programme on Cyber Security for Board of Directors of NBFCs

According to RBI, NBFCs are free to take this mandatory certification from Administrative Staff College of India (ASCI), which is a highly reputed Government of India institution with clear track record of conducting high value Cybersecurity Programmes for BFSI Sector.

PREFACE

The Reserve Bank of India (RBI) has made cybersecurity compliance mandatory for NBFCs through the Cyber Security Framework for NBFCs, the 2024-25 Master Direction on Cyber Resilience and Digital Payment Security Controls, and the Master Direction on IT Governance, Risk, Controls and Assurance Practices. These guidelines require strong governance, Board-level oversight, continuous monitoring, and effective incident response.

As NBFCs become increasingly digital, data-driven, and customer-centric, they also attract the attention of sophisticated cyber adversaries. In such an environment, leadership preparedness becomes not just a regulatory requirement, but a strategic imperative. While traditional training programmes often remain limited to concepts and compliance checklists, modern NBFC leaders need deeper strategic cyber literacy—an understanding of emerging threats, their business impact, and the ability to guide the organisation toward stronger cyber resilience.

This programme has been thoughtfully designed to address this very need. It brings together regulatory expectations, business impact insights, sector-specific threat intelligence, and immersive cyber simulation experiences. Together, these elements equip NBFC leaders with the clarity, confidence, and decision-making capability required to effectively steer cyber risk governance and build a resilient digital enterprise.

PROGRAMME OBJECTIVES

To familiarize the participants with the emerging trends of cyber risks in India and extant regulatory instructions
Strengthen oversight and governance capabilities in alignment with RBI’s cybersecurity frameworks.
Enhance decision-making during cyber incidents using practical, scenario-driven exercises.
Understand the role of the Board in the critical areas such as Vendor Management, Business Continuity Plan and Disaster Management, IS Audit etc.
Improve preparedness for regulatory expectations, audit scrutiny, and crisis communication.
Translate cybersecurity insights into business-oriented action plans and resilience strategies.

These objectives are structured to deliver a comprehensive and results-oriented training programme that enhances participants’ ability to manage cyber risks, meet compliance, and apply advanced tools within the immersive Cyber Theme Park (CTmP) environment.

CYBER THEME PARK (CTmP):Signature Differentiator

Cyber Theme Park (CTmP): An Immersive, Experiential, Practical Learning Environment

The Cyber Theme Park is the Center piece of this certification programme - a first-of-its-kind experiential learning arena designed specifically for decision-makers. The CTmP transforms cybersecurity awareness into a high-impact, gamified, interactive, and simulation-driven experience.

It replicates the real-world threat landscape in a controlled, safe environment where leaders get to experience, analyse, and respond to attacks just like cyber adversaries do in actual financial environments.

This programme offers much more:

Hands-on immersion that lets leaders experience threat behaviour rather than learn it theoretically.
Sector specific attack scenarios derived from real incidents in the sector.
Board-level crisis simulations highlighting regulatory, reputational, and operational impact.
Instant, action-oriented feedback to strengthen decision-making and governance..
Practical insights for cyber investment and oversight, enabling Boards to better engage with CISOs and risk leaders.

COURSE MODULES

The programme is a one-day on-premises workshop structured into six high-impact modules covering key aspects of cybersecurity and IT governance.

Module 1: Principles of Cybersecurity	Basic cybersecurity terminologies and concepts Security frameworks Cyber risk landscape in India – Emerging
Module 2: IT & Cybersecurity Governance	Roles and Responsibilities of Board – Regulatory Expectations – Master Direction on Information Technology Governance, Risk, Controls and Assurance Practices
Module 3: Operational Risk & IT Risk	Understanding of IT Risk / Cybersecurity Risk Data sensitivity, privacy issues – Implications of DPDP Act & Rules, Mitigation against ransomware attacks Enterprise-wide Risk Management Continuous Risk Monitoring
Module 4: Elements of Cybersecurity	IT Outsourcing Risk (including Supply Chain risk, cloud security, etc.) and its mitigation Business Continuity Plan and Disaster Management
Module 5: IT Assurance function and Other Aspects	Importance of IS Audit in identifying risks Best Practices in IT Security / Cyber Security in RBI Regulated Entities Common deficiencies observed in Cyber Security Policy and its implementation Three lines of Defences in IT / Information Security
Module 6: Artificial Intelligence & Emerging Technology Risks	AI in Cybersecurity & Fraud Detection Generative AI Risks & Emerging Threats AI Governance, Compliance & DPDP Considerations AI-Driven Case Studies
CTmP (Cyber Lab):	Discussion on Latest Industry-Specific Case Studies Data Classification Exercise Cyber Drills – Phishing Simulation, MFA Bypass, Identity Theft Cyber Demonstrations – Cyber Attack Simulation KRI Dashboard Walk through AI-Powered Threat Detection Assessments Tabletop Exercise
Certification & validation Summery

WHO SHOULD ATTEND

This programme is designed for Board Members and Independent Directors, as well as members of key governance committees such as the Audit Committee, Risk Management Committee, and IT Strategy Committee. It is particularly relevant for Directors responsible for oversight of governance, compliance, technology, and organisational resilience who are expected to guide cybersecurity strategy and ensure alignment with RBI’s expectations.

FACULTY & DELIVERY PARTNERS

The programme is delivered through a strategic collaboration with experienced banking cybersecurity leaders, former regulators, distinguished academics from premier institutions, and industry experts specializing in IT governance and financial sector security. This collective expertise ensures that Board members receive a comprehensive learning experience that integrates regulatory perspective, strategic governance insights, and practical, real-world cybersecurity knowledge.

Organisational sponsorship is essential

DURATION

This is One Day programme scheduled on December 20, 2025.

PROGRAMME FEE

Non-Residential Fee: Rs. 15,000/- plus GST as applicable (presently 18%) per participant. The fee covers tuition, course ware (in electronic form) working lunch and other facilities of the College including internet usage.

Note: Kindly forward us the details of the Bank/ Wire transfer of the programme fee through email to: poffice@asci.org.in for confirmation.

MEDICAL INSURANCE

The nominees are requested to carry with them the proof of Medical Insurance. The sponsoring agency is required to endorse the nominees' medical coverage in the event of hospitalization

LAST DATE FOR NOMINATION

Please use the prescribed/attached form. Last date for receiving nominations is December 16, 2025. Kindly contact Programmes Officer for further details (contact details are given at the end of the nomination form).

ASCI ALUMNI ASSOCIATION

Participants of the College programmes will automatically become members of the ASCI alumni association.

CERTIFICATE OF PARTICIPATION

The College issues a Certificate of Participation on conclusion of the programme.

Programme Director

Dr Madhusoodanan PR

Email: mpr@asci.org.in

Administrative Staff College of India (ASCI) is taking all the precautionary measures and following all the norms (in light of COVID-19) to provide a safe environment for the participants who are visiting our Campus to attend the Training Programmes.

For Indian Participants

Bank Account Number	62090698675
Beneficiary Name	Administrative Staff College of India
IFSC Code	SBIN0020063
Bank Name	State Bank of India
Branch Address	Bellavista Branch, Raj Bhavan Road, Somajiguda, Hyderabad - 500 082.

For Foreign Participants

Bank Account Number	62090698675
Beneficiary Name	Administrative Staff College of India
Swift Code	SBININBB327
Bank Name	State Bank of India
Branch Address	Bellavista Branch, Raj Bhavan Road, Somajiguda, Hyderabad - 500 082.
Country	India

About ASCI

Administrative Staff College of India

Bella Vista, Raj Bhavan Road, Khairatabad, Hyderabad - 500 082, India.
Telefax (Programmes Office): 0091-40-23324365
Mobile: 9246203535, Phone: 0091-40-66534247
Fax: 0091-40-66534356

ASCI is the first Management Development Institution set up in the country at the instance of the Government of India and industry in 1956 to impart state-of-the-art management education for practicing managers, a legacy that we proudly take forward with a strong alumni of over 1,76,500. We are proud of our alumni which includes the leaders of Indian industry and senior Civil Servants in the government, public sector undertakings to be a part of this unique organisation. We are thankful to you all for the support extended in the past and look forward to your continuing patronage in 2025-26.

Also, ASCI conducts customized programmes for Government of India, State Governments, Public Sector, Private Sector and various international organisations. Our experienced faculty bring to the table a wealth of academic credentials, rich industry exposure and act as a catalyst in the classroom discussions, case study analyses and tutorials. Our faculty also conduct international programmes which provide an exposure to the global best practices. In addition to this, faculty at ASCI also carry out large number of management research activities (typically about 100 each year) which helps them provide the much needed value addition in the training programmes. In addition, we conduct non-residential programmes at our New Delhi Centre as well as off-campus programmes at the venue of the client’s choice.

College Park Campus

ASCI, Road No. 3, Banjara Hills,
Hyderabad - 500 034, Telangana, India

Phone: +91-40-66720700 / 01 / 02 / 05

Fax: +91-40-66720725

Delhi Campus

ASCI, C-24, Institutional Area, South of IIT,
Behind Qutub Hotel, New Delhi - 110016

Phone: +91-11-26962204, 26961750, 26961850

Fax: +91-11-26866097