Definition
SEBI · circular SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113, 20 Aug 2024SEBI's Cybersecurity and Cyber Resilience Framework for all its regulated entities: stock exchanges and other market infrastructure institutions, brokers, depository participants, mutual funds, portfolio managers, registrars and the rest. It replaced the earlier sector-by-sector circulars with one graded framework (MIIs, Qualified, Mid-size, Small-size and Self-certification REs) built on the functions govern, identify, protect, detect, respond and recover, with periodic cyber audits by CERT-In empanelled auditors and a Cyber Capability Index for the largest entities. After extensions the compliance date for most REs was 31 Aug 2025; the technical clarifications of 28 Aug 2025 made some items recommendatory, including ISO 27001 certification, and let an RE rely on an equivalent framework of another regulator such as RBI.