State Bank of India’s extensive cyber controls are under fresh scrutiny following reports of exposed customer records, ahead of plans for an AI-enabled Cyber Defence Centre in FY27.
State Bank of India is facing fresh scrutiny over its cyber resilience after reports of a suspected exposure of customer records, even as the lender’s latest disclosures describe a broad and increasingly automated security apparatus. The bank’s annual filings, published before the reported incident, set out a layered defence model built around audits, continuous monitoring, staff training and formal incident-response procedures.
According to SBI’s FY2025-26 Sustainability Report, information-systems audits covered 427 IT systems during the year, while reviews of outsourced IT activity extended to 695 operations. The bank also said internal and external cybersecurity audits examined 176 IT applications and infrastructure and 151 systems, although it did not disclose what those checks found, how many vulnerabilities were identified or how many were fixed. The report said there were no data breaches during FY26.
The bank says its Global Cyber Security Operations Centre keeps watch over critical systems for threats and unauthorised access, with automated tracking now replacing a manual process for spotting indicators of compromise, the digital traces that can signal an attack. SBI also says it monitors phishing, fraudulent websites, brand impersonation, voice phishing and fake mobile applications, while ethical hacking, penetration tests, red-team exercises and monthly password-spray checks are used to probe weaknesses across websites, apps, databases, networks and internal systems. Firewalls, encryption, multi-factor authentication and data-loss prevention tools add further protection, while CERT SBI acts as the main first responder to incidents.
SBI says its response framework covers detection, containment, eradication, recovery and post-incident review, with a separate incident-response unit handling forensics, threat hunting, mock drills and regulatory reporting. The bank said it ran 2,079 information-security and cybersecurity training sessions in FY26, reaching 39,961 employees, and that nearly 181,000 staff had completed mandatory e-learning and assessments by 31 March 2026. Oversight sits with a board-level IT Strategy Committee, while the Group Chief Information Security Officer leads the information security function. SBI also cites ISO 27001:2022 and ISO 22301 certification, PCI DSS compliance and alignment with the Reserve Bank of India’s cyber security framework.
Looking ahead, SBI plans to fold its next-generation Global Cyber Security Operations Centre into an integrated Cyber Defence Centre, combining security operations with incident response and using automation, machine learning and agentic AI. The centre is due to become operational in FY27. The bank is also developing a Cyber Security Centre of Excellence to support capabilities across SBI and the wider banking, financial services and insurance sector, as it tries to strengthen defences while expanding its digital footprint.
Disclaimer: This article is intended to inform and educate, not to recommend or endorse any financial product, investment or strategy. Please consider your own financial circumstances and seek professional advice where appropriate before making financial decisions.
