At the 13th State Bank of India Banking and Economics Conclave in Mumbai on 24 September 2026, Reserve Bank of India Deputy Governor Rohit Jain delivered an address that cut to the heart of a debate reshaping central banking orthodoxy worldwide: in an era defined by rapid technological change, what does it actually mean for a bank to be resilient? His answer, subsequently published by the Bank for International Settlements on 5 October 2026, was unambiguous — technology, cyber security, and artificial intelligence are no longer peripheral concerns for the financial sector. They are its load-bearing pillars.
The framing of the address was itself significant. Jain did not speak about digital banking as an aspirational destination, nor as a competitive differentiator. Instead, he repositioned it as the baseline from which a more demanding standard — resilient banking — must now be built. The progression implied in the title of his address, "From Digital Banking to Resilient Banking," signals a maturation in regulatory thinking at one of the world's largest and most systemically important central banks. India's banking sector, serving a population exceeding 1.4 billion and processing an extraordinary volume of real-time payments through platforms such as the Unified Payments Interface, cannot afford the luxury of treating operational continuity as an afterthought.
Three Pillars, One Mandate
Deputy Governor Jain structured his argument around three interdependent pillars: technology infrastructure, cyber security, and artificial intelligence. The sequencing matters. Technology forms the foundation — the digital rails upon which modern banking operates. Cyber security is the structural integrity of those rails, ensuring that speed and openness do not become vectors for systemic vulnerability. Artificial intelligence, the third pillar, represents both the most promising tool and the most complex risk that contemporary banking has yet encountered.
This tripartite framework reflects a recognition at the highest levels of the RBI that the transformation of banking is not a linear process. Banks do not simply digitise their services and then declare the job done. Each layer of technological adoption introduces new dependencies, new attack surfaces, and new algorithmic decision-making processes that require their own governance architecture. Resilience, in Jain's conception, is not a static quality but a continuous discipline — one that demands constant recalibration as the threat landscape and the technological toolkit evolve together.
Cyber Security as a Systemic Imperative
The emphasis on cyber security as a pillar of trust rather than merely a compliance checkbox is a notable evolution in the RBI's public posture. India's financial system has undergone one of the most rapid digitisation programs of any major economy over the past decade, and that speed carries inherent risk. The sheer scale of digital transactions flowing through Indian banks every day makes the sector an attractive target for sophisticated threat actors, ranging from state-sponsored groups to organised cybercriminal networks.
By elevating cyber security to the level of a foundational pillar — placed alongside technology and artificial intelligence rather than subordinate to them — Jain's address signals that the RBI views cyber resilience as a precondition for public trust, not merely a technical function housed within information technology departments. This is a meaningful distinction. Institutions that treat cyber security as an operational cost centre rather than a strategic priority are, in the RBI's implicit framing, not yet resilient banks — they are digital banks with unresolved structural vulnerabilities.
Artificial Intelligence and the Governance Challenge
Of the three pillars, artificial intelligence demands the most nuanced treatment, and Jain's choice to position it as a central element of the resilience framework — rather than, say, a separate innovation agenda — is analytically astute. AI is already embedded in credit underwriting, fraud detection, customer service, and liquidity management across India's banking sector. The question is no longer whether AI will be deployed, but whether its deployment will be governed with sufficient rigour to ensure that it reinforces rather than undermines systemic stability.
The RBI's implicit challenge to Indian banks is to develop AI governance frameworks that are proportionate to the risks involved, transparent enough to satisfy regulatory scrutiny, and robust enough to perform reliably under stress. A fraud-detection model that functions well under normal market conditions but degrades under precisely the circumstances when it is most needed — a liquidity crunch, a cyberattack, a sudden market dislocation — provides a false sense of security. Resilient AI, like resilient infrastructure, must be tested against adversarial conditions, not merely optimised for average performance.
What This Means for the Sector
The publication of Jain's address by the Bank for International Settlements amplifies its significance beyond India's borders. The BIS serves as the primary intellectual and policy forum for the world's central banks, and speeches distributed through its platform carry an implicit endorsement as contributions to global regulatory dialogue. That an address focused on the operational and technological resilience of a national banking system has been elevated to this forum underscores the degree to which these themes — digital infrastructure integrity, cyber security governance, and AI risk management — have become shared priorities across jurisdictions.
For banking institutions operating in India and for international banks with significant exposure to Indian markets, the direction of travel is now clearly signposted. The RBI is not merely encouraging banks to adopt new technologies; it is redefining the standard of prudence to encompass how those technologies are governed, secured, and stress-tested. Digital capability, in isolation, will no longer be sufficient to satisfy a regulator increasingly focused on the harder question of what happens when that capability is challenged.
Written by the editorial team — independent journalism powered by Codego Press.