Q45: Which of the following authorities is mandatory to conduct the Vulnerability Assessment, Penetration Testing, and Security Audit of the V-CIP infrastructure?

The bank's internal IT audit team.

Any ISO 27001 certified external auditor.

The empanelled auditors of Indian Computer Emergency Response Team (CERT-In).

The Reserve Bank of India's IT subsidiary.

✅ Correct Answer: C

The empanelled auditors of Indian Computer Emergency Response Team (CERT-In) shall conduct such tests.

Security audit requirements are part of the technical syllabus of the IIBF AML KYC Exam 2026.

Bank Promotion Exam Guide