Sebi Extends Compliance Deadlines for Cybersecurity Framework

Sebi has provided clarifications and extended deadlines for compliance with its Cybersecurity and Cyber Resilience Framework, effective January 1, 2025, now extended to April 1, 2025, for certain entities. This initiative is aimed at enhancing the cybersecurity defenses of Sebi-regulated entities while addressing concerns raised by stakeholders.

Sebi addressed queries and announced updates to its Cybersecurity and Cyber Resilience Framework for regulated entities on Tuesday, granting extensions on compliance deadlines and offering regulatory forbearance.

The framework was initially introduced in August to help Sebi-regulated entities bolster their cybersecurity strategies effectively, allowing them to respond to vulnerabilities and recover from incidents more resiliently.

The compliance deadlines set for January 1, 2025, have been extended to March 31, 2025, with an additional deadline for KYC registration and depository participants pushed to April 1, 2025, following feedback.

(With inputs from agencies.)