Capital markets regulator Sebi on Friday tweaked the cyber security and cyber resilience framework of stock exchanges and other market infrastructure institutions and mandated them to conduct a comprehensive cyber audit at least two times in a financial year.
Along with the cyber audit reports, they have been directed to submit a declaration from the MD and CEO certifying compliance by the market infrastructure institutions (MIIs) -- stock exchanges, clearing corporations and depositories -- with all Sebi guidelines and advisories related to cyber security issued from time to time, according to a circular.
Under the modified framework, MIIs should identify and classify critical assets based on their sensitivity and criticality for business operations, services and data management.