Skip to main content
Meet the Securities and Exchange Board of India’s Cyber Security and Cyber Resilience Framework.
The Securities and Exchange Board of India (SEBI) Cyber Security and Cyber Resilience Framework (CSCRF) sets cybersecurity requirements for SEBI-regulated entities such as stock exchanges, depositories, brokers, and mutual funds. It consolidates security, governance, and resilience requirements across the Indian securities market.
The CSCRF applies to a wide range of SEBI-regulated entities, with requirements scaled by entity size and type.

​
Who needs SEBI CSCRF?

Market infrastructure institutions

Stock exchanges, clearing corporations, and depositories.

Intermediaries

Brokers, mutual funds, and other SEBI-regulated intermediaries.

​
Key components

Governance

Board-level cybersecurity oversight and accountability.

Protective controls

Identity management, network security, and data protection.

Detection & response

Monitoring, incident detection, and response capabilities.

Cyber resilience

Business continuity and recovery for critical market functions.

​
How DSALTA helps with SEBI CSCRF

1

Activate SEBI CSCRF

Select the SEBI CSCRF from the Frameworks page. DSALTA maps its requirements to controls.
2

Review mapped controls

Review governance, protection, and resilience controls and assign owners.
3

Collect evidence automatically

Connect integrations to gather technical evidence.
4

Approve policies

Review and approve policies aligned with the CSCRF.
5

Track readiness

Monitor your compliance posture against the framework.

​
Frequently asked questions

SEBI-regulated entities including exchanges, depositories, brokers, and mutual funds, with requirements scaled by entity category.
Yes. The CSCRF classifies entities (for example by size and activity) and applies proportionate requirements to each category.