SEBI extends time for regulated entities to adopt Cybersecurity framework to three months

Capital markets regulator extended the time for regulated entities to comply with “Cybersecurity and Cyber Resilience Framework” until June 30, according to a circular on March 28.

“SEBI had received multiple requests for CSCRF compliance timelinesextension to ensure ease of compliance for them. Therefore, it has been decided to extend the compliance timelines by three (3) months, i.e.,till June30, 2025to all REs (regulated entities), except Market Infrastructure Institutions (MIIs), KYC Registration Agencies (KRAs), and Qualified Registrars to an Issue andShare Transfer Agents(QRTAs),” SEBI said in the circular.