Sebi's Cybersecurity Extension: Ensuring Robust Resilience Amidst Evolving Threats

Sebi has extended the deadline by three months for regulated entities to implement a cybersecurity and cyber resilience framework. This move follows requests for more time to comply with the guidelines, aiming to enhance cybersecurity measures and resilience against cyber threats, with a focus on evolving risks and technological advancements.

The Securities and Exchange Board of India (Sebi) has announced an extension for implementing a cybersecurity and cyber resilience framework by three months, pushing the deadline to June 30, 2025. This decision accommodates requests from regulated entities (REs) for additional time to comply with the new guidelines.

The framework, introduced in August 2024, is pivotal for fortifying the cybersecurity infrastructure of Sebi-regulated entities. It aims to prepare these entities to effectively resist, respond to, and recover from cyber threats. The extension seeks to provide a smooth transition towards these robust measures.

Exempt from the extension are Market Infrastructure Institutions (MIIs), KYC Registration Agencies (KRAs), and Qualified Registrars to an Issue and Share Transfer Agents (QRTAs). The decision underscores Sebi's commitment to strengthening REs' cybersecurity in light of evolving cyber risks and technological progress.

(With inputs from agencies.)