COBIT, IT Governance Institute, 2008

Standard of Good Practice for information security, ISF, 2007

CERT-In advisories

IT examination guidance from Federal Financial Institutions Examination Council (FFIEC), US

Internet Banking and Technology Risk Management Guidelines, Monetary Authority of Singapore, MAS, 2008

Authentication in an Internet Banking Environment, FFIEC, 2005

Risk Management Principles for Electronic Banking, BIS, 2003

Management of security risk in information and information technology, APRA, 2010

‘Guidelines on Managing Risks and Code of Conduct in Outsourcing of Financial Services by banks’ – RBI, 2006

‘Guidelines on Outsourcing’ - Monetary Authority of Singapore, 2004

Sound Practices for the Management and Supervision of Operational Risk, BIS, 2003

Data Protection Act, United Kingdom

Safe Harbour Act, USA

Board Briefing on IT Governance, 2nd edition, Copyright © (2003) by the IT Governance Institute. All rights reserved. Used by permission.

Cloud computing – benefits, risks and recommendations for information security, ENISA, 2009

Twenty Critical Controls for Effective Cyber Defense, SANS Institute, 2009

IT Governance Framework, IDRBT, 2010

Information Security Governance: Guidance for Boards of Directors and Executive Management, ITGI, 2006

IT Act, 2000 and IT Amendment Act, 2008 (India)