Cyber Security and Cyber Resilience framework for Portfolio Managers
Show AI Summary
Portfolio managers must implement cyber security and resilience frameworks with rapid incident reporting and annual audits.
Portfolio managers with AUM of INR 3000 crore or more must implement a board approved Cyber Security and Cyber Resilience framework covering governance (board review, Technology Committee, designated CISO), asset identification and classification, risk lifecycle controls (identify, protect, detect, respond, recover), technical and physical safeguards, annual VAPT by CERT In empanelled firms with mandated remediation, continuous monitoring, incident forensics, RTO/RPO limits, immediate incident reporting to the regulator and CERT In, quarterly reporting, periodic training and annual independent audits.