Del. HC: Accrual of Cause of Action at a Place is not a Consideration for Determining Jurisdiction  ||  Mad. HC to State: Prevent use of Stickers such as ‘Police’ or ‘GOI’ on Private Vehicles  ||  Bom. HC: Magistrate Needn’t Provide Additional Reasons for Amount of Interim Compensation Awarded  ||  Del. HC: ‘THEOBROMA’ is Free to Expand its Outlets Across the Country  ||  Ker. HC: Detention Order Under KAPPA 2007 must be Confirmed Within 3 Months from Date of Execution  ||  Kar. HC: Not Every False Statement Made in Court Must be Subject to Prosecution  ||  Ker. HC: Roads are Ordinarily Deserted During Night; Likelihood of Causing Death by Accident is Less  ||  Del. HC: Severity of Offence Can’t Disentitle Foreigner to Get Parole for Filing SLP  ||  Cal. HC: Can’t Compound Proceedings u/s 138 NI Act at Revision Stage Without Complainant’s Consent  ||  Bom. HC: There Should be Some Accountability Fixed on Courts in Cases of Prolonged Incarceration    

Advisory for SEBI Regulated Entities (REs) regarding Cybersecurity best practices- (Securities and Exchange Board of India) (22 Feb 2023)

MANU/SMIS/0014/2023

Capital Market

1. Financial sector organizations, stock exchanges, depositories, mutual funds and other financial entities have been experiencing cyber incidents which are rapidly growing in frequency and sophistication. Considering the interconnectedness and interdependency of the financial entities to carry out their functions, the cyber risk of any given entity is no longer limited to the entity's owned or controlled systems, networks and assets

2. Further, given the sophistication and persistence of the threat with a high level of coordination among threat actors, it is important to recognize that many traditional approaches to risk management and governance that worked in the past may not be comprehensive or agile enough to address the rapid changes in the threat environment and the pace of technological change that is redefining public and private enterprise.

3. Thus, an efficient and effective response to and recovery from a cyber-incident by REs are essential to limit any related financial stability risks. For ensuring the same, Financial Computer Security Incident Response Team (CSIRT-Fin) has provided important recommendations in its report sent to SEBI. The applicable recommendations, in the form of an advisory, are enclosed at Annexure-A of this circular.

4. This advisory should be read in conjunction with the applicable SEBI circulars (including but not limited to Cybersecurity and Cyber Resilience framework, Annual System Audit framework, etc.) and subsequent updates issued by SEBI from time to time.

5. The compliance of the advisory shall be provided by the REs along with their cybersecurity audit report (conducted as per the applicable SEBI Cybersecurity and Cyber Resilience framework). The compliance shall be submitted as per the existing reporting mechanism and frequency of the respective cybersecurity audit.

6. The advisory annexed with this circular shall be effective with immediate effect.

7. This circular is issued in exercise of powers conferred under Section 11(1) of the Securities and Exchange Board of India Act, 1992, to protect the interests of investors in securities and to promote the development of, and to regulate the securities market.

Tags : ADVISORY   RE   CYBERSECURITY  

Share :        

Disclaimer | Copyright 2023 - All Rights Reserved