https://www.taxtmi.com/circulars?id=66785 SEBI mandates immediate compliance by MIIs with prescribed cybersecurity and cyber resilience measures, to be reported with statutory cybersecurity audits and implemented within 120 days. Required measures include encrypted offline backups tested quarterly; gold images and spare hardware for rapid rebuilds; vulnerability scanning and quarterly patch reviews; endpoint protection, application whitelisting, MFA, least privilege controls and privileged access management; secure Active Directory and domain controller practices with penetration testing; network and API whitelisting, DNS filtering and DNS Sec; detailed log retention; controlled remote access; SOPs to implement government cybersecurity advisories; business continuity drills including ransomware scenarios; and vendor/linked MII inclusion in recovery testing. en-us Tue, 29 Aug 2023 00:00:00 +0530 Tue, 29 Aug 2023 17:30:00 +0530 TaxTMI RSS Generator https://www.taxtmi.com/circulars?id=66785 SEBI mandates immediate compliance by MIIs with prescribed cybersecurity and cyber resilience measures, to be reported with statutory cybersecurity audits and implemented within 120 days. Required measures include encrypted offline backups tested quarterly; gold images and spare hardware for rapid rebuilds; vulnerability scanning and quarterly patch reviews; endpoint protection, application whitelisting, MFA, least privilege controls and privileged access management; secure Active Directory and domain controller practices with penetration testing; network and API whitelisting, DNS filtering and DNS Sec; detailed log retention; controlled remote access; SOPs to implement government cybersecurity advisories; business continuity drills including ransomware scenarios; and vendor/linked MII inclusion in recovery testing. Circulars SEBI Tue, 29 Aug 2023 00:00:00 +0530 https://www.taxtmi.com/circulars?id=66785