Which of the following is included in the new policy of RBI regarding cyber attacks for banks?

1. Setting up an adaptive incident response, management and recovery framework mainly to deal with adverse incidents/disruptions, if and when they occur.
2. Formulation of a Cyber Crisis Management Plan (CCMP) which should be a part of the overall board-approved strategy.
3. Cyber security policy should be distinct and separate from the broader IT policy/IS Security policy.

Select the correct answer using the codes given below:

a) 1 onlyb) 1 and 2 onlyc) 2 and 3 onlyd) All of the above

Answer d

Explanation:- All the statements are correct