Cyber incident reporting requirement mandates rapid notification to regulators and CERT In and quarterly disclosures to aid market resilience. Modification requires Stock Brokers and Depository Participants to report all cyber attacks, threats, incidents and breaches to Stock Exchanges/Depositories and SEBI within 6 hours of detection or notice, and to the national computer emergency response authority and, where systems are designated protected, to the national critical infrastructure protection centre; quarterly reports on incidents and mitigations must be submitted to Stock Exchanges/Depositories within 15 days of quarter end and shared with SEBI via a dedicated e mail.