https://www.taxtmi.com/circulars?id=57851 A mandatory cyber security and cyber resilience framework for Qualified RTAs requires board-approved policies, appointment of a CISO, a Technology Committee, and adoption of a risk lifecycle approach-identify, protect, detect, respond and recover-aligned with national critical infrastructure principles and standards such as ISO 27001/27002. Controls include strict access management, two-factor authentication, encryption of data in transit and at rest, network hardening, regular vulnerability assessment and penetration testing, monitoring and logging, incident response and recovery plans with drills, quarterly anonymised incident reporting to the regulator, staff training, and annual independent audits. en-us Fri, 08 Sep 2017 00:00:00 +0530 Sat, 01 Dec 2018 11:17:00 +0530 TaxTMI RSS Generator https://www.taxtmi.com/circulars?id=57851 A mandatory cyber security and cyber resilience framework for Qualified RTAs requires board-approved policies, appointment of a CISO, a Technology Committee, and adoption of a risk lifecycle approach-identify, protect, detect, respond and recover-aligned with national critical infrastructure principles and standards such as ISO 27001/27002. Controls include strict access management, two-factor authentication, encryption of data in transit and at rest, network hardening, regular vulnerability assessment and penetration testing, monitoring and logging, incident response and recovery plans with drills, quarterly anonymised incident reporting to the regulator, staff training, and annual independent audits. Circulars SEBI Fri, 08 Sep 2017 00:00:00 +0530 https://www.taxtmi.com/circulars?id=57851