SEBI Revamps Cybersecurity Framework with New Classification Criteria for Financial Service Providers

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....SEBI issued clarifications to the Cybersecurity and Cyber Resilience Framework (CSCRF) for Regulated Entities (REs), revising categorization thresholds across multiple financial service sectors. The circular introduces detailed classification criteria for stock brokers, depository participants, investment advisers, research analysts, portfolio managers, alternative investment funds, and merchant bankers into four categories: Qualified, Mid-size, Small-size, and Self-certification REs. Key modifications include exemptions for entities with smaller client bases, modified reporting authorities, and flexible implementation timelines, with mandatory compliance set for June 30, 2025, aimed at enhancing cybersecurity standards across the securities market ecosystem.....