CSCRF OVERVIEW:

This precarious climate comes at a time when technological developments in securities markets are moving at a rapid pace. Therefore, maintaining a robust cybersecurity posture becomes necessary to protect investor interests. To that end, SEBI recently released the Cybersecurity & Cyber Resilience Framework (CSCRF) on August 20, 2024, featuring various mandates for its regulated entities (REs).

The framework was created through a collaborative process with various stakeholders like several Market Infrastructure Institutions (MIIs) and Regulated Entities (REs), Indian Computer Emergency Response Team (CERT-In), National Critical Information Infrastructure Protection Centre, Industry Standard Forum (ISF), information security auditors and Cloud Service Providers (CSPs).

The guidelines are based taking into account international standards like ISO 27000, CIS Controls Version 8, NIST SP 800-53, BIS Financial Stability Institute Guidelines and CPMI-IOSCO principles.