Cybersecurity obligations require mutual funds/AMCs to report incidents promptly and undertake periodic VAPT and cyber audits. Mutual Funds and AMCs must identify and classify critical assets and maintain an up-to-date inventory approved by Boards/Trustees. They are required to conduct periodic VAPT using CERT-In empanelled organisations, submit final VAPT reports to SEBI after Technology Committee approval within one month, remediate vulnerabilities immediately and file closure compliance within three months. VAPT or scanning is required before commissioning new critical systems. All cyber incidents must be reported to SEBI within six hours and quarterly reports submitted within fifteen days of quarter-end; entities must perform two cyber audits per year and provide an MD/CEO compliance declaration.
Cases where this provision is explicitly mentioned in the judgment/order text; may not be exhaustive. To view the complete list of cases mentioning this section, Click here.
Provisions expressly mentioned in the judgment/order text.
Cybersecurity obligations require mutual funds/AMCs to report incidents promptly and undertake periodic VAPT and cyber audits.
Mutual Funds and AMCs must identify and classify critical assets and maintain an up-to-date inventory approved by Boards/Trustees. They are required to conduct periodic VAPT using CERT-In empanelled organisations, submit final VAPT reports to SEBI after Technology Committee approval within one month, remediate vulnerabilities immediately and file closure compliance within three months. VAPT or scanning is required before commissioning new critical systems. All cyber incidents must be reported to SEBI within six hours and quarterly reports submitted within fifteen days of quarter-end; entities must perform two cyber audits per year and provide an MD/CEO compliance declaration.
Full Summary is available for active users!
Note: It is a system-generated summary and is for quick reference only.
TaxTMI 
of 
TaxTMI 
