Module: | Priority Sector, Consumer Protection & Digital Lending
Q125: Who is responsible for appointing the CISA certified auditor to conduct the Information System (IS) audit of entities that receive credit information based on individual consent?
✅ Correct Answer: C
The correct answer is C. The CIC must incorporate a specific clause in their agreement stipulating that a CISA (Certified Information Systems Auditor) certified auditor, appointed directly by the entity itself (the third party receiving the data), would conduct the Information System (IS) audit.
This appropriately shifts the financial and operational burden of strict cybersecurity compliance onto the entity requesting the data, rather than the CIC or the RBI.
This appropriately shifts the financial and operational burden of strict cybersecurity compliance onto the entity requesting the data, rather than the CIC or the RBI.