Portfolio managers must implement cyber security and resilience frameworks with rapid incident reporting and annual audits. Portfolio managers with AUM of INR 3000 crore or more must implement a board approved Cyber Security and Cyber Resilience framework covering governance (board review, Technology Committee, designated CISO), asset identification and classification, risk lifecycle controls (identify, protect, detect, respond, recover), technical and physical safeguards, annual VAPT by CERT In empanelled firms with mandated remediation, continuous monitoring, incident forensics, RTO/RPO limits, immediate incident reporting to the regulator and CERT In, quarterly reporting, periodic training and annual independent audits.
Cases where this provision is explicitly mentioned in the judgment/order text; may not be exhaustive. To view the complete list of cases mentioning this section, Click here.
Provisions expressly mentioned in the judgment/order text.
Portfolio managers must implement cyber security and resilience frameworks with rapid incident reporting and annual audits.
Portfolio managers with AUM of INR 3000 crore or more must implement a board approved Cyber Security and Cyber Resilience framework covering governance (board review, Technology Committee, designated CISO), asset identification and classification, risk lifecycle controls (identify, protect, detect, respond, recover), technical and physical safeguards, annual VAPT by CERT In empanelled firms with mandated remediation, continuous monitoring, incident forensics, RTO/RPO limits, immediate incident reporting to the regulator and CERT In, quarterly reporting, periodic training and annual independent audits.
Full Summary is available for active users!
Note: It is a system-generated summary and is for quick reference only.
TaxTMI 
of 
TaxTMI 
