The Securities and Exchange Board of India (Sebi) on Friday tightened norms around cyber security for market infrastructure institutions (MIIs).
The regulator has mandated MIIs to conduct comprehensive cyber audits at least two times in a financial year.
Further, the managing directors (MD) and chief operating officers (CEO) of the MIIs have been directed to submit a declaration of compliance with all circulars and advisories related to cyber security issued by Sebi from time to time.
The market regulator has also directed MIIs to communicate the status of the implementation of the provisions of the latest circular it has issued on cyber security
Under the modified framework, MIIs should identify and classify critical assets based on their sensitivity and criticality for business operations, services and data management.
The critical assets should include business critical systems, internet facing applications /systems, systems that contain sensitive data, sensitive personal data, sensitive financial data, personally identifiable information data, among others.
All the ancillary systems used for accessing or communicating with critical systems either for operations or maintenance should also be classified as critical system. Further, the board of the MII will be required to approve the list of critical systems.
“To this end, MII should maintain up-to-date inventory of its hardware and systems, software and information assets (internal and external), details of its network resources, connections to its network and data flows,” Sebi said.
Dear Reader,
Business Standard has always strived hard to provide up-to-date information and commentary on developments that are of interest to you and have wider political and economic implications for the country and the world. Your encouragement and constant feedback on how to improve our offering have only made our resolve and commitment to these ideals stronger. Even during these difficult times arising out of Covid-19, we continue to remain committed to keeping you informed and updated with credible news, authoritative views and incisive commentary on topical issues of relevance.
We, however, have a request.
As we battle the economic impact of the pandemic, we need your support even more, so that we can continue to offer you more quality content. Our subscription model has seen an encouraging response from many of you, who have subscribed to our online content. More subscription to our online content can only help us achieve the goals of offering you even better and more relevant content. We believe in free, fair and credible journalism. Your support through more subscriptions can help us practice the journalism to which we are committed.
Support quality journalism and subscribe to Business Standard,
Digital Editor