Updated: 01 May 2026
Indian banks increasingly deploy Cisco Duo to satisfy RBI Authentication Directions 2025 and the RBI IT Governance Master Direction. Both frameworks require MFA for employee access to critical information systems and two-factor authentication for digital payment transactions.
The RBI compliance requirement has two distinct components. The first covers customer-facing payment transactions. The second covers employee access to core banking systems, treasury platforms, and internet banking back-ends. An MFA deployment that addresses only one of these components does not satisfy both frameworks.
For employee access, the deployment challenge in Indian banking is branch scale. A regional bank with 200 branches and 3,000 employees spread across Tier 1 and Tier 2 cities cannot rely on smartphones as the authentication factor. Branch staff may share workstations. Personal mobile devices may not be permitted on the floor. Hardware TOTP tokens and shift-based session management address both constraints.
For privileged access, RBI examiners now ask specifically for authentication logs demonstrating individual accountability. A shared administrator account, regardless of MFA deployment, cannot satisfy this requirement. Named individual accounts are the prerequisite.
The RBI compliance evidence package that examiners request includes seven elements: deployment architecture documentation, user population register, authentication log exports covering 180 days, vendor access register, break-glass procedure with bypass code log, device enrolment records, and signed access control policy.
Cisco Duo generates the authentication logs required for this package. The logs must be configured to flow to an India-resident SIEM from day one of deployment, not assembled retrospectively before an examination.
Proactive Data Systems, a Cisco Preferred Security Partner, deploys Cisco Duo for Indian banks and structures the RBI compliance evidence package alongside the deployment from the start.
We'll get back to you shortly.
