EFRM refers to NPCI?s internal dedicated function within its CRO-led Enterprise Risk Management team. It defines fraud-risk appetite, tracks Key Risk Indicators (KRIs), reviews incidents, and shapes mitigation policies under ISO/CSO and PFMI-aligned frameworks?making fraud governance a second-layer defense.
