Regulatory Overview

The Reserve Bank of India (RBI) published draft guidance titled "Guidance on Regulatory Principles for Model Risk Management, 2026." The document outlines expectations for Regulated Entities (REs), including banks, Non-Banking Financial Companies (NBFCs), All India Financial Institutions (AIFIs), and Asset Reconstruction Companies (ARCs).
The regulatory framework addresses the growing operational, financial, and reputational risks associated with automated decision-making and artificial intelligence deployment in the financial sector.

‍Core Regulatory Expectations

Board-Approved Framework: Regulated Entities must establish a formal Model Risk Management Framework (MRMF) approved by their Board of Directors.

Risk Tiering: AI and machine learning models must be categorized based on systemic importance, financial exposure, and operational impact.

Model Control Mechanisms: Frameworks must incorporate manual override controls and automated isolation protocols, often referred to as kill-switches, for compromised models.

Third-Party Risk Management: Accountability standards extend to external vendors, third-party software, and outsourced algorithmic services.‍

Implementation Process

Posture Assessment: Evaluating existing model inventories against draft guidance categories.

‍Gap Identification: Comparing current governance structures to global and local requirements.

‍Remediation Planning: Developing structured timelines to update policies, vendor agreements, and monitoring systems.

Why Choose

tiny

crows

Exposes hidden vulnerabilities before attackers do

Simulates real-world attacks to validate defenses end-to-end.

AI agents continuously assess and control third- party risk.

Secures AI systems against evolving threats.

200 +
Happy Clients

Tinycrows was founded with a clear belief that cybersecurity must protect what truly matters to a business, not just what appears on a checklist.

Enhancing Collaboration between Cx

I was highly impressed with tinycrows' dedication to securing our fintech product. Their recommendations and prompt responses not only helped us resolve vulnerabilities but also prepared us for security due diligence.

Lokesh Jain

CTO, Finac

I was highly impressed with tinycrows' dedication to securing our fintech product. Their recommendations and prompt responses not only helped us resolve vulnerabilities but also prepared us for security due diligence.

Lokesh Jain

CTO, Finac

I am writing to express my sincere appreciation for your diligent work in completing the Security assessment for JPBL. Thanks for your effort! I appreciate your team completing this assessment in a timely manner.

Ravi Gali

CISO - Jio Payments Bank

I was highly impressed with tinycrows' dedication to securing our fintech product. Their recommendations and prompt responses not only helped us resolve vulnerabilities but also prepared us for security due diligence.

Lokesh Jain

CTO, Finac

I am writing to express my sincere appreciation for your diligent work in completing the Security assessment for JPBL. Thanks for your effort! I appreciate your team completing this assessment in a timely manner.

Ravi Gali

CISO - Jio Payments Bank

I thoroughly enjoyed tinycrows commitment to securing our platform. It seemed more like a partnership and the feedback helps to make us a better organization and be more aware in our infrastructure and coding practices.

Jackie Popovich

Director, Roambee

I was highly impressed with tinycrows' dedication to securing our fintech product. Their recommendations and prompt responses not only helped us resolve vulnerabilities but also prepared us for security due diligence.

Lokesh Jain

CTO, Finac

I am writing to express my sincere appreciation for your diligent work in completing the Security assessment for JPBL. Thanks for your effort! I appreciate your team completing this assessment in a timely manner.

Ravi Gali

CISO - Jio Payments Bank

I thoroughly enjoyed tinycrows commitment to securing our platform. It seemed more like a partnership and the feedback helps to make us a better organization and be more aware in our infrastructure and coding practices.

Jackie Popovich

Director, Roambee

I was highly impressed with tinycrows' dedication to securing our fintech product. Their recommendations and prompt responses not only helped us resolve vulnerabilities but also prepared us for security due diligence.

Lokesh Jain

CTO, Finac

I am writing to express my sincere appreciation for your diligent work in completing the Security assessment for JPBL. Thanks for your effort! I appreciate your team completing this assessment in a timely manner.

Ravi Gali

CISO - Jio Payments Bank

I was highly impressed with tinycrows' dedication to securing our fintech product. Their recommendations and prompt responses not only helped us resolve vulnerabilities but also prepared us for security due diligence.

Lokesh Jain

CTO, Finac

I am writing to express my sincere appreciation for your diligent work in completing the Security assessment for JPBL. Thanks for your effort! I appreciate your team completing this assessment in a timely manner.

Ravi Gali

CISO - Jio Payments Bank

Understanding the RBI Draft Guidance on Model Risk Management

Regulatory Overview

‍Core Regulatory Expectations

Implementation Process

Why Choose

tiny

crows

Tinycrows was founded with a clear belief that cybersecurity must protect what truly matters to a business, not just what appears on a checklist.

Enhancing Collaboration between Cx