A Structured Taxonomy of IT Supply Chain Risks in the Indian Banking Sector

This paper presents a structured taxonomy of 108 IT supply chain risk assessment factors relevant to the Indian banking sector, organised into nine thematic domains. Drawing from regulatory guidelines, academic literature, and documented industry incidents, the study consolidates and classifies the factors across vendor reliability, operational resilience, servicelevel governance, vendor governance, dependency concentration, regulatory compliance, security controls, supply chain structure, and technology lifecycle and external risk. The objective is to provide a comprehensive, factor-level analytical framework that captures the multidimensional nature of IT supply chain vulnerabilities in banking ecosystems and that maps directly onto the Basel Committee’s operational risk event categories. The findings emphasise the growing complexity of third-party risk exposure and the need for structured oversight mechanisms within Indian financial institutions. This study provides a practical classification framework that can be directly used by banks for IT supply chain risk assessment and vendor governance.