Revised categorisation and clarifications under SEBI’s Cyber Security and Cyber Resilience Framework

On 30 April 2025, SEBI issued Clarifications to Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (Revised Circular) introducing clarifications and revised categorisation criteria for the CSCRF applicable to Regulated Entities (REs) in the securities market. The Revised Circular adopts a practical and proportionate approach, aligning obligations with the nature and size of operations of different market participants.