Indian regulators publish their expectations as directions and circulars, not as frameworks — which means the work of turning them into a control set falls on you. These are the mappings, deadlines and control lists, written out in full.
SEBI's Cyber Security and Cyber Resilience Framework applies different obligations to five categories of regulated entity. Here is how to work out which one you are, and what changes once you know.
How an urban co-operative bank cut its annual third-party assessment cycle from eleven weeks to nineteen days by fixing the step that was actually failing.
A single reference for every incident reporting deadline an Indian regulated entity is subject to, and the exact point at which each clock starts running.
Third-party risk management, defined — plus what a working programme actually contains and how it differs from vendor management.
A reading order for Indian cyber and data-protection regulation — by regulator, and by what you are likely to need first.
Partner with experts who help businesses stay secure, compliant, resilient, and audit-ready.
