https://www.taxtmi.com/circulars?id=65627 KRAs must identify, classify and board approve critical assets, maintain inventories of hardware, software and network resources, and subject new or critical systems to vulnerability scanning and penetration testing prior to commissioning. Periodic VAPT covering critical infrastructure must be conducted at least annually, by CERT In empaneled organisations, with final reports approved by the Technology Committee and submitted to the regulator. Vulnerabilities must be remediated immediately and closure certified within three months. KRAs must undertake comprehensive cyber audits twice per financial year and submit an MD/CEO compliance declaration with audit reports. en-us Mon, 30 May 2022 00:00:00 +0530 Mon, 30 May 2022 16:02:00 +0530 TaxTMI RSS Generator https://www.taxtmi.com/circulars?id=65627 KRAs must identify, classify and board approve critical assets, maintain inventories of hardware, software and network resources, and subject new or critical systems to vulnerability scanning and penetration testing prior to commissioning. Periodic VAPT covering critical infrastructure must be conducted at least annually, by CERT In empaneled organisations, with final reports approved by the Technology Committee and submitted to the regulator. Vulnerabilities must be remediated immediately and closure certified within three months. KRAs must undertake comprehensive cyber audits twice per financial year and submit an MD/CEO compliance declaration with audit reports. Circulars SEBI Mon, 30 May 2022 00:00:00 +0530 https://www.taxtmi.com/circulars?id=65627