Capital markets regulator Sebi has asked the KYC Registration Agencies (KRAs) to report all cyber attacks, threats and breaches experienced by them within six hours of detecting such incidents.
The incident will also be reported to the Indian Computer Emergency Response team (CERT-In) in accordance with the guidelines issued by CERT-In from time to time, according to a circular.
Additionally, the KRAs, whose systems have been identified as ‘protected system’ by National Critical Information Infrastructure Protection Centre (NCIIPC) will also report such incidents to NCIIPC.
Rakesh Jhunjhunwala 62nd birthday today: Rs 5000 investment now worth over Rs 39500 crore in 36 years
Tata Motors, Biocon, Adani Power, Tata Steel, SpiceJet, Marico stocks in focus on 6 July 2022
LIC, Adani Wilmar get largecap tag in AMFI list, IDBI Bank, HDFC AMC get revised as midcaps; check full list
Share Market LIVE: Sensex touches 53700, Nifty above 15900, could soon head to 16000; Bajaj Finance up 4%
“All cyber attacks, threats, cyber incidents and breaches experienced by KRAs shall be reported to Sebi within six hours of noticing / detecting such incidents or being brought to notice about such incidents,” the regulator said on Tuesday.
The quarterly reports containing information on cyber attacks, threats, cyber incidents and breaches experienced by the stock brokers and depository participants and measures taken to mitigate the vulnerabilities, including information on bugs vulnerabilities, threats that may be useful for others, will have to be submitted to Sebi within 15 days from the end of every quarter.
This information will be shared to the Securities and Exchange Board of India (Sebi) through a dedicated e-mail id.
Last month, the regulator came out with a similar directive for stock brokers and depository participants.