SEBICU200424 - Taxpublishers.in

SUBSCRIBE FOR FULL CONTENT


The Tax Publishers Circular No. SEBI/HO/MIRSD/TPD/P/CIR/2022/96, dt. 06-07-2022 Modification in Cyber Security and Cyber resilience framework of Qualified Registrars to an Issue and Share Transfer Agents (QRTAs) 1. SEBI vide circular dt. 8-9-2017, 15-10-2019 and 27-5-2022 prescribed framework for Cyber Security and Cyber Resilience for all Qualified Registrars to an Issue and Share Transfer Agents (QRTAs). 2. In partial modification to Annexure A of SEBI circular dt. 8-9-2017 the paragraph-51 shall be read as under : 51. All Cyber-attacks, threats, cyber-incidents and breaches experienced by QRTAs shall be reported to SEBI within 6 hours of noticing / detecting such incidents or being brought to notice about such incidents. The incident shall also be reported to Indian Computer Emergency Response team (CERT-In) in accordance with the guidelines / directions issued by CERT-In from time to time. Additionally, the QRTAs, whose systems have been identified as Protected system by National Critical Information Infrastructure Protection Centre (NCIIPC) shall also report the incident to NCIIPC. The quarterly reports containing information on cyber-attacks, threats, cyber-incidents and breaches experienced by QRTAs and measures taken to mitigate vulnerabilities, threats and attacks including information on bugs/ vulnerabilities/threats that may be useful for other QRTAs shall be submitted to SEBI within 15 days from the quarter ended June, September, December and March of every year. The above information shall be shared through the dedicated e-mail id: rta@sebi.gov.in. 3. The format for reporting as prescribed in the circular dt. 15-10-2019 remains unchanged and is attached as Annexure B. 4. QRTAs shall take necessary steps to put in place systems for implementation of the circular. 5. The provisions of the Circular shall come into force with immediate effect. 6. The circular is issued with the approval of the competent authority. 7. This circular is being issued in exercise of powers conferred under Section 11 (1) of the Securities and Exchange Board of India Act, 1992 to protect the interests of investors in securities and to promote the development of, and to regulate the securities market. Annexure - B SUBSCRIBE FOR FULL CONTENT

The Tax Publishers

Circular No. SEBI/HO/MIRSD/TPD/P/CIR/2022/96, dt. 06-07-2022

Modification in Cyber Security and Cyber resilience framework of Qualified Registrars to an Issue and Share Transfer Agents (QRTAs)

1. SEBI vide circular dt. 8-9-2017, 15-10-2019 and 27-5-2022 prescribed framework for Cyber Security and Cyber Resilience for all Qualified Registrars to an Issue and Share Transfer Agents (QRTAs).

2. In partial modification to Annexure A of SEBI circular dt. 8-9-2017 the paragraph-51 shall be read as under :

51. All Cyber-attacks, threats, cyber-incidents and breaches experienced by QRTAs shall be reported to SEBI within 6 hours of noticing / detecting such incidents or being brought to notice about such incidents.

The incident shall also be reported to Indian Computer Emergency Response team (CERT-In) in accordance with the guidelines / directions issued by CERT-In from time to time. Additionally, the QRTAs, whose systems have been identified as Protected system by National Critical Information Infrastructure Protection Centre (NCIIPC) shall also report the incident to NCIIPC.

The quarterly reports containing information on cyber-attacks, threats, cyber-incidents and breaches experienced by QRTAs and measures taken to mitigate vulnerabilities, threats and attacks including information on bugs/ vulnerabilities/threats that may be useful for other QRTAs shall be submitted to SEBI within 15 days from the quarter ended June, September, December and March of every year. The above information shall be shared through the dedicated e-mail id: rta@sebi.gov.in.

3. The format for reporting as prescribed in the circular dt. 15-10-2019 remains unchanged and is attached as Annexure B.

4. QRTAs shall take necessary steps to put in place systems for implementation of the circular.

5. The provisions of the Circular shall come into force with immediate effect.

6. The circular is issued with the approval of the competent authority.

7. This circular is being issued in exercise of powers conferred under Section 11 (1) of the Securities and Exchange Board of India Act, 1992 to protect the interests of investors in securities and to promote the development of, and to regulate the securities market.

Annexure - B