Cybersecurity and Cyber Resilience Framework: SEBI clarifies scope, equivalence/exclusivity principles and reporting obligations for regulated entities. SEBI clarifies CSCRF scope and compliance: REs must apply either the Principle of Exclusivity for systems used solely for SEBI activities or the Principle of Equivalence where primary regulator frameworks provide equivalent controls; REs must demonstrate which principle is relied upon and SEBI reserves the right to verify compliance submissions made to other regulators.