SEBI CSCRF
The Cyber Security & Cyber Resilience Framework for market intermediaries — governance, VAPT, and SOC obligations.
Overview
SEBI's CSCRF consolidates cyber-security expectations for stock brokers, depository participants, AMCs, RIAs, and other intermediaries. We map you to the framework's requirements across governance, protection, detection, and resilience, and prepare you for the mandated audits.
What it covers
The requirements we assess you against and help you meet.
CSCRF governance and policy alignment
VAPT and security-control assessment
SOC / Market-SOC monitoring readiness
Cyber-resilience and recovery testing
Reporting and compliance-submission support
Remediation and re-assessment
How we take you there
Gap assessment
Know exactly where you stand against the standard, control by control.
Readiness
Policies, controls, and evidence built with your team — not dumped on them.
Certification support
We stand with you through the audit itself: findings handled, evidence packaged.
Continuous compliance
Stay compliant year-round with monitoring, internal audits, and surveillance prep.
Related
RBI Cybersecurity Framework
Framework compliance for banks, NBFCs, co-operative banks, and payment aggregators — baseline controls, SOC mandate, and annual system audits.
Learn moreISO 27001
The world's leading information-security management standard — from scoping through Stage 1 and Stage 2 certification support.
Learn moreCERT-In Security Audit
Empaneled security audits recognized by the Indian government — for tenders, directions compliance, and organizations that need a defensible report.
Learn moreReady to get started
with SEBI CSCRF?
Talk to a practitioner — not a sales rep. We usually reply within one business day.
Talk to Us