Cyber Security and Cyber Resilience framework for Portfolio Managers- (Securities and Exchange Board of India) (29 Mar 2023)

MANU/SIPM/0005/2023

Capital Market

1. With rapid technological advancement in the securities market, there is a greater need for maintaining robust cyber security and to have a cyber- resilience framework to protect the integrity of data and guard against breaches of privacy.

2. As part of the operational risk management, the Portfolio Managers need to have robust cyber security and cyber resilience framework in order to provide essential facilities and services and perform critical functions in the securities market as Portfolio Manager.

3. Accordingly, all Portfolio Managers with asset under management of INR 3000 crore or more, under discretionary and non-discretionary portfolio management service taken together, as on the last date of the previous calendar month shall comply with the provisions of Cyber Security and Cyber Resilience as placed at Annexure-1.

Implementation Schedule:

4. Based on feedback received from stakeholders, it has been decided that the guidelines annexed with this circular shall be effective from October 01, 2023. In this context, Association of Portfolio Managers in India (APMI) shall also furnish activity wise implementation timelines and progress in implementation of provisions of this circular to SEBI on bi-monthly basis.

5. Portfolio Managers and APMI shall take necessary steps for implementing the circular, including putting the required processes and systems in place to ensure compliance with the provisions of this circular.

6. This circular is issued in exercise of powers conferred under Section 11(1) of the Securities and Exchange Board of India Act, 1992 read with Regulation 43 of the SEBI (Portfolio Managers) Regulations, 2020, to protect the interests of investors in securities market and to promote the development of, and to regulate the securities market.

Tags : CYBER SECURITY CYBER RESILIENCE PORTFOLIO MANAGERS