Cyber incident reporting by regulated entities must be made...

Cyber incident reporting by regulated entities must be made through SEBI's Cyber Incident Reporting Portal, aligned with the Financial Stability Board's Format for Incident Reporting Exchange (FIRE). The aligned portal requires structured reporting using common information fields, standard definitions and consistent incident classifications, supporting harmonised reporting. It permits reporting across the incident lifecycle, including initial notification, intermediate updates and final closure, recognising that complete information may not be available initially. Regulated entities must establish systems to implement the portal-based reporting requirement and make any necessary amendments to their bye-laws, rules or regulations. The requirement operates alongside applicable cybersecurity and cyber-resilience reporting obligations.