SEBI Extends Cybersecurity Compliance Deadline

SEBI extends the deadline for regulated entities to implement the cybersecurity framework by two months. This decision follows requests for more time to ensure compliance. The framework aims to enhance cybersecurity and resilience among SEBI-regulated entities, adapting to evolving cyber threats and technological advancements.

The Securities and Exchange Board of India (SEBI) has decided to extend the deadline for adopting its cybersecurity framework by two months. The new deadline, now set for August 31, 2025, applies to regulated entities excluding certain infrastructure institutions and agencies. The move comes as entities requested more time for compliance.

SEBI's cybersecurity and cyber resilience framework, introduced in August 2024, aspires to bolster the cybersecurity posture of its regulated entities. It aims to ensure that these entities can effectively withstand, respond to, and recover from various cyber threats, thereby enhancing their overall resilience.

In response to industry queries, SEBI has also issued clarifications to aid entities in understanding the framework. Stock exchanges and depositories have been instructed to communicate the extended deadline to their participants and publicly share the update via their websites.