Just a moment...
Press 'Enter' to add multiple search terms. Rules for Better Search
No Folders have been created
Are you sure you want to delete "My most important" ?
NOTE:
Don't have an account? Register Here
<h1>SEBI Updates Cyber Security Rules for QRTAs: Annual VAPT, Bi-annual Audits, and Mandatory CEO Compliance Certification Required.</h1> The Securities and Exchange Board of India (SEBI) has revised the cyber security and resilience framework for Qualified Registrars to an Issue and Share Transfer Agents (QRTAs). QRTAs must identify critical assets, conduct annual vulnerability assessments and penetration tests (VAPT), and remedy any detected vulnerabilities promptly. Systems identified as 'protected' require VAPT twice annually. A comprehensive cyber audit is required twice a year, with compliance certified by the MD/CEO. QRTAs must report implementation status to SEBI within 10 days. The circular is effective immediately, aiming to protect investors and regulate the securities market.