https://www.taxtmi.com/circulars?id=66225 SEBI's cloud framework requires REs to adopt Board approved GRC, remain fully accountable for cloud hosted data and services, use MeitY empaneled CSPs with STQC (or equivalent) audited data centres, and ensure explicit, enforceable contracts that delineate responsibilities, provide SEBI/RE audit and access rights, mandate encryption and key management (preferably BYOK/BYOE and HSM), continuous monitoring, incident notification and forensic support, and integrated reporting of compliance in systems audit, cybersecurity audit and VAPT reports within prescribed transition timelines. en-us Mon, 06 Mar 2023 00:00:00 +0530 Wed, 11 Feb 2026 15:59:38 +0530 TaxTMI RSS Generator https://www.taxtmi.com/circulars?id=66225 SEBI's cloud framework requires REs to adopt Board approved GRC, remain fully accountable for cloud hosted data and services, use MeitY empaneled CSPs with STQC (or equivalent) audited data centres, and ensure explicit, enforceable contracts that delineate responsibilities, provide SEBI/RE audit and access rights, mandate encryption and key management (preferably BYOK/BYOE and HSM), continuous monitoring, incident notification and forensic support, and integrated reporting of compliance in systems audit, cybersecurity audit and VAPT reports within prescribed transition timelines. Circulars SEBI Mon, 06 Mar 2023 00:00:00 +0530 https://www.taxtmi.com/circulars?id=66225