TaxTMI Login
Just a moment...
Press 'Enter' to add multiple search terms. Rules for Better Search
of 
of 
No Folders have been created
Are you sure you want to delete "My most important" ?
NOTE:
of of 
All Circulars
of of All Circulars
Note
Bookmark
Share
Don't have an account? Register Here
of <h1>SEBI Updates Cybersecurity Rules for KYC Agencies: Annual Audits, Asset Classification, and Rapid Vulnerability Response Required.</h1> The Securities and Exchange Board of India (SEBI) has updated its cyber security and resilience framework for KYC Registration Agencies (KRAs). KRAs must identify and classify critical assets, conduct regular vulnerability assessments and penetration tests, and address any detected vulnerabilities immediately. Vulnerability assessments must occur annually, or biannually for systems identified as 'protected' by NCIIPC. KRAs are required to perform cyber audits twice a year and submit compliance declarations from their MD/CEO. Implementation of these measures is mandatory, with KRAs required to report their compliance status to SEBI within ten days. The circular is effective immediately.
TaxTMI 
TaxTMI 
