30-06-2025
Sebi extends cybersecurity framework compliance deadline by 2 months
Academy
Empower your mind, elevate your skills
Markets regulator Sebi on Monday extended the deadline by two months till August for regulated entities to adopt and implement the cybersecurity and cyber resilience framework The framework is designed to ensure that Sebi-regulated entities (REs) maintain a robust cybersecurity posture, remain equipped with adequate cyber resiliency measures and can withstand, respond to, and recover from cyber threats, move came after Sebi received multiple requests for extension of timelines to ensure ease of compliance for them."Therefore, it has been decided to extend the compliance timelines by two months, i.e., till August 31, 2025 to all REs, except Market Infrastructure Institutions (MIIs), KYC Registration Agencies (KRAs), and Qualified Registrars to an Issue and Share Transfer Agents (QRTAs)," Sebi said in a marks the second extension granted by the the need for robust cybersecurity measures and protection of data and IT infrastructure, Sebi issued the Cybersecurity and Cyber Resilience Framework (CSCRF) for its regulated entities in August receiving various queries from REs seeking clarification on the framework, the Securities and Exchange Board of India (Sebi) issued a clarification in CSCRF is a significant step in adapting towards evolving cyber risks and technological regulator emphasised that the framework aims to enhance the resilience of regulated entities, enabling them to withstand and recover from cyber incidents regulator said the stock exchanges and depositories have been directed to inform their members and participants of the updated compliance deadline and disseminate the circular on their respective websites. PTI
