Governance & Control Framework for Digital Payments

NPCI aligns with RBI’s “Digital Payment Security Controls” and frameworks like OWASP and ISO for web/app vulnerabilities, authentication lifecyles, encryption, OK to store/not to store data, OTP resilience, reconciliation, and exception handling in fraud risk management.