[INDIA] RBI, SEBI and IRDAI · Source-code escrow and continuity obligations for critical applications[EU DORA] ICT third-party risk testing required · In force Jan 2025[PRA] SS2/21 UK · Vendor recovery evidence required[MAS] Singapore TRM · Independent vendor recoverability expected[APRA] CPS 230 Australia · Third-party continuity obligations in force[FFIEC] United States · Source-code access and software escrow addressed in third-party contracts[ENTERPRISE] Mission-critical software procurement increasingly requires continuity evidence before contract

LEARNING HUB

Regulatory guides for software recoverability

Find the relevant rulebook and see how source-code custody, exit planning and signed recovery evidence relate to each requirement.

Book a 15-min Demo Browse the glossary

REGULATORY GUIDES

From exact requirement to recoverability evidence

Each regulation guide names the article or section, entity scope, status, consequences and Castler artefacts that support the obligation. Orientation only; verify against official texts and professional advice.

RBI IT Directions §12(f)

Source-code escrow, updates and programme fixes for critical bank applications.

Explore

EU DORA

ICT third-party risk, exit planning and recoverability evidence from January 2025.

Explore

UK SS2/21

Material outsourcing, stressed exit and continuity evidence for critical vendors.

Explore

LEARNING HUB

Bring the requirement into focus

Book a 15-min Demo to discuss the evidence required for your software estate.

Book a 15-min Demo

ISO 27001SOC 2 Type IIPCI DSS