The card network may also have been non-compliant with Indian central bank’s requirement to appoint a domestic auditor certified by the country's nodal cybersecurity agency—Indian Computer Emergency Response Team (CERT-in)—to conduct its external compliance audit, the sources added.
