Cyber Security & Cyber Resilience framework for Stock Brokers / Depository Participants - Clarifications

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....nformation: Quarterly reports containing information on cyber-attacks and threats experienced by Stock Brokers / Depository Participants and measures taken to mitigate vulnerabilities, threats and attacks including information on bugs / vulnerabilities / threats that may be useful for other Stock Brokers / Depository Participants should be submitted to Stock Exchanges / Depositories. 3. In this regard, following guidelines are being issued for submission of report / information and the timelines: 3.1. A format for submitting the reports is attached as Annexure. 3.2. For the quarter ended on September 30, 2019, quarterly reports shall be submitted by stock brokers / depository participants not later than November 30, 2019 as per the for....

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....Annual Type III Half-yearly Paragraph 58 of Annexure 1 of the SEBI circular dated December 03, 2018 stands modified accordingly. 6. Stock Exchanges and Depositories shall a) make necessary amendments to the relevant byelaws, rules and regulations for the implementation of the above direction; b) bring the provisions of this circular to the notice of their members and depository participants respectively and also disseminate the same on their websites; and c) communicate to SEBI, the status of implementation of the provisions of this circular in their Monthly Report. 7. This circular is being issued in exercise of powers conferred under Section 11 (1) of the Securities and Exchange Board of India Act, 1992 and Section 19 of the De....

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

.... affected system - IP Address: Computer / Host Name: Operating System Last Hardware (incl. Ver. / release No.): Patched/ Updated: Vendor/ Model: 4. Type of incident - ☐ Phishing Network scanning /Probing Break- in/Root Compromise Virus/Malicious Code Website Defacement ☐ System Misuse 5. Description of incident - ㅁㅁ Spam Bot/Botnet Email Spoofing Denial of Service(DoS) ☐ Distributed Denial of Service(DDoS) ☐ User Account Compromise Website ☐ ㅁㅁㅁ Intrusion Social Engineering Technical Vulnerability IP Spoofing Ransomware ☐ Other 6. Unusual behavior/symptoms (Tick the symptoms) - ☐ System crashes ☐ New user accounts/Accounting....