Setup & Clients

Connections & Secrets

Core banking, data sources, third parties and security tools · URLs, API keys and secrets go straight to the HSM-backed vault

Third parties

Third party	Type	Endpoint	Data shared	Criticality	Status
NPSB switch	Payment switch	npsb.internal	Transactions	High	Active
Card scheme	Card scheme	scheme.example	Transactions	High	Active
Credit bureau (CIB)	Credit bureau	cib.bb.org.bd	Customer PII	High	Active
Cloud backup vendor	Cloud provider	backup.example.bd	None (encrypted)	Medium	Active

Each third party gets a risk tier, a data-flow record and a review date. High-criticality vendors must upload an attestation (ISO 27001 or SOC 2 report) through the GRC Platform.