Regulated entities in the securities market are advised to strengthen cyber resilience against AI-driven vulnerability detection tools by updating systems and applications promptly, using virtual patching where needed, and conducting regular vulnerability assessments, security audits, and scenario-based risk assessments. They should coordinate with third-party vendors to release and deploy patches, harden systems, secure APIs through authentication, authorization, rate limiting and whitelisting, and maintain continuous SOC monitoring with tested SOAR/SIEM responses. The advisory also requires updated asset inventories and software bills of materials, onboarding to the Market SOC where applicable, and long-term planning for AI use in detection and autonomous mitigation, in line with SEBI's cyber security framework.
Regulated entities in the securities market are advised to strengthen cyber resilience against AI-driven vulnerability detection tools by updating systems and applications promptly, using virtual patching where needed, and conducting regular vulnerability assessments, security audits, and scenario-based risk assessments. They should coordinate with third-party vendors to release and deploy patches, harden systems, secure APIs through authentication, authorization, rate limiting and whitelisting, and maintain continuous SOC monitoring with tested SOAR/SIEM responses. The advisory also requires updated asset inventories and software bills of materials, onboarding to the Market SOC where applicable, and long-term planning for AI use in detection and autonomous mitigation, in line with SEBI's cyber security framework.
Note: It is a system-generated summary and is for quick reference only.