RBI/2025-26/ DOR.MRG.REC.300/14.10.001/2025-26 November 28, 2025 Guidance Note on Market Risk Management Table of Contents Chapter-I Preliminary 2 A. Introduction 2 B. Applicability 2 Chapter-II Policy Framework 3 A. Risk Identification 3 B. Risk Monitoring 3 C. Models Governance and Validation 4 D. Risk Reporting 4 Chapter-III Organisational Set Up 5 A. Dealing Room 6 B. Back Office 8 Chapter-IV Risk Management in Trading Book 10 A. Trading Book 10 B. Equity Position Risk Management 11 C. Foreign Exchange Risk Management 11 D. Treasury Operations 12 E. Risk Control Systems 12

RBI/2025-26/ DOR.ORG.REC.301/14.10.001/2025-26 November 28, 2025 Guidance Note on Operational Risk Management and Operational Resilience Table of Contents Chapter-I Preliminary 3 A. Introduction 3 B. Applicability 4 C. Definitions 5 Chapter-II Overview of Operational Risk and Resilience 9 Chapter-III Pillar 1: Prepare and Protect 11 A. Three lines of defence for management of Operational Risk 11 B. Governance and Risk Culture 14 C. Responsibilities of Board of Directors and Senior Management 19 D. Risk management environment - Identification and Assessment 24 E. Change Management 29 F. Monitoring and Reporting 31 G. Control and Mitigation 32 Chapter-IV Pillar 2: Build Resilience 36 A. Essential Elements of Operational Resilience 36 B. Mapping of Interconnections and Interdependencies 37 C. Third-party Dependency Management 38 D. Business Continuity Planning and Testing 40 E. Incident Management 42 F. Information and Communication Technology (ICT) including Cyber Security 43 Chapter-V Pillar 3: Learn and Adapt 46 A. Disclosure and Reporting 46 B. Lessons Learned Exercise and Adapting 46 C. Continuous Improvement through Feedback Systems 48 Chapter-VI Repeal and other provisions 50

RBI/2002-03/…. DBOD. No. BP. 520 /21.04.103/2002-03 October 12, 2002 All Commercial Banks (Excluding RRBs and LABs) Guidance Note on Credit Risk Management