Vigilance Administration in Banks: CVC Rules for IIBF Ethics

Most bankers meet the vigilance machinery only once, and usually at the worst possible moment. That is a mistake, because vigilance administration in banks is designed far more to protect the honest officer than to punish the careless one. This guide sets out who runs it, the three arms it works through, the test that separates a lapse from a vigilance case, and how the IIBF Ethics paper frames all of it.

🛡️ Who Runs Vigilance, and Under What Authority

The Central Vigilance Commission was set up in 1964 on the recommendation of the Santhanam Committee and was given statutory status by the Central Vigilance Commission Act, 2003. Its remit covers central government ministries and the corporations, government companies and societies owned or controlled by the Centre, which brings public sector banks squarely within its supervision.

Inside each public sector bank, the function is headed by a Chief Vigilance Officer (CVO), appointed in consultation with the Commission and treated as an extension of it within the institution. The CVO reports to the bank's chief executive on administration but answers to the CVC on the substance of vigilance work. That dual line is deliberate: it is what keeps vigilance administration in banks from becoming an instrument of internal politics.

Three points the examiner keeps returning to:

• Superintendence, not day-to-day management. The CVC supervises vigilance administration; it does not run the bank's disciplinary machinery itself.
• Advice, then action. In cases involving senior officers of public sector banks, the disciplinary authority seeks the Commission's advice before proceeding.
• The CBI link. The CVC also exercises superintendence over the CBI's functioning in respect of offences under the Prevention of Corruption Act, 1988.

This institutional design is the practical expression of the values discussed in the chapter on ethics at the organizational level, and it is examinable directly. Syllabus and exam-pattern updates are published on the official IIBF website.

🔍 The Three Arms: Preventive, Detective and Punitive

The Commission itself describes vigilance work as having three faces, and a good exam answer names all three before discussing any one of them. Candidates who write only about punishment lose half the marks available.

Preventive vigilance is the largest and least glamorous part. It asks how the opportunity for wrongdoing can be designed out: maker–checker separation, rotation of staff in sensitive desks, mandatory leave policies, systems studies of loss-making processes, and simplification of procedures that invite discretion. A bank that does preventive vigilance well generates fewer punitive cases.

Detective or surveillance vigilance is about spotting what is already happening: scrutiny of annual property returns, surprise inspections, monitoring of officers on the agreed list of doubtful integrity, and analysis of complaint patterns across branches.

Punitive vigilance is the tail end: investigation, a charge sheet, proceedings under the applicable service or conduct regulations, and, where a criminal offence is disclosed, a referral for investigation.

💡 Exam Tip: If a question asks for the "thrust" or "primary emphasis" of vigilance administration in banks, the expected answer is preventive vigilance. Punitive action is treated as evidence that prevention failed.

⚖️ The Vigilance Angle: Where a Lapse Becomes a Case

The single most useful concept in this module is the vigilance angle. Not every error, loss or procedural deviation is a vigilance matter, and a bank that treats them all as such destroys credit decision-making.

A vigilance angle is ordinarily present where there is demand or acceptance of illegal gratification, possession of assets disproportionate to known sources of income, forgery or cheating, abuse of official position for pecuniary advantage to oneself or another, gross or wilful negligence, recklessness in decision-making, a blatant violation of systems and procedures, or exercise of discretion in a manner that shows an intent to favour a party.

Contrast that with a commercial decision that simply turned out badly. An account can slip into default because a sector collapsed, not because anyone was bought. The relevant question is not whether the bank lost money but whether the officer acted with malafide intent, gross negligence or a personal interest.

Two protections matter here. First, Section 17A of the Prevention of Corruption Act, 1988, inserted by the 2018 amendment, bars a police officer from enquiring into or investigating an offence alleged against a public servant where it relates to a recommendation made or decision taken in the discharge of official duties, without prior approval of the competent authority. Second, staff accountability in ordinary NPA cases is examined through a defined internal framework with fixed timelines, rather than reflexively.

⚠️ Common Mistake: Writing that "any loss to the bank attracts vigilance action". It does not. Absent malafide intent, gross negligence or personal gain, a bona fide commercial judgement is a non-vigilance matter, and saying so earns marks.

Reading this alongside the chapter on work ethics and the workplace shows why intent, not outcome, is the pivot.

📣 Reporting Channels and the Protection They Carry

Effective vigilance administration in banks depends on people being willing to speak, which is why the reporting architecture is worth memorising in its exact form.

The PIDPI route. Under the Public Interest Disclosure and Protection of Informers Resolution, 2004, the Central Vigilance Commission is the designated agency to receive written complaints about corruption or misuse of office by public servants, including public sector bank employees. The complainant's identity is protected, and the Commission can act against anyone who victimises the informant.

The company-law route. Section 177(9) of the Companies Act, 2013 requires listed and other prescribed companies to establish a vigil mechanism, and Section 177(10) adds the safeguards that matter: protection against victimisation and direct access to the chairperson of the audit committee. Regulation 22 of the SEBI LODR Regulations, 2015 mirrors this for listed entities.

The RBI route. The Reserve Bank operates a Protected Disclosures Scheme for private sector and foreign banks, acting as the nodal agency for such complaints.

One statutory point catches candidates out. Officers of private banks are not outside the corruption framework: the Supreme Court in CBI v. Ramesh Gelli (2016) held that officials of private banking companies are public servants for the purposes of the Prevention of Corruption Act, read with Section 46A of the Banking Regulation Act, 1949.

Embedding these channels is covered in the chapter on building an ethical organization; whether they function is what an ethical audit in banks establishes. Board-level duties sit in the code of conduct for bank directors, the value framework in our note on Indian ethos and values in banking, and the same insistence on verified identity in CKYC ID. More notes: our ethics in banking article hub.

🧠 Practice MCQs: Vigilance Administration in Banks

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

❓ Frequently Asked Questions

Treated as a punishment machine, vigilance administration in banks looks like something to avoid. Treated correctly, it is the reason an officer who documents a decision, discloses an interest and follows the delegation matrix can take commercial risk without fear. Learn the three arms, the vigilance angle criteria and the reporting routes, and this module becomes one of the easiest scoring areas in the paper. Ready to test that? Work through the module in our CAIIB and certification course library and take a timed chapter test today.