IFSCA Cyber Security Framework

Overview

IFSCA Cyber Security Framework (IFSCA) — International Financial Services Centres Authority cyber security framework for regulated entities in IFSC — governance, identification, protection, detection, response, recovery, and outsourcing risk. ComplAI maps this framework’s controls so your team can track implementation, evidence, and audit readiness.

15 controls available in ComplAI for this framework.

Who it's for

• Organizations that must demonstrate IFSCA compliance
• Security and compliance teams operating in India
• Customers and partners that require IFSCA assurance

Why it matters

IFSCA is a recognized financial framework. Activating it in ComplAI lets you manage controls, evidence, and readiness in one place.

How ComplAI helps

• Activate IFSCA in the Framework Library to load its control catalog
• Assign owners, track compliance status, and attach evidence per control
• Use risk register and issues workflows when controls fail or deviate
• Export readiness views for leadership and auditors

Sample controls

• Gov 1

  Board and senior management oversight

  governance

• Gov 2

  Cyber security policy

  governance

• Gov 3

  CISO or equivalent

  governance

• Identify 1

  Asset and data inventory

  asset management

• Identify 2

  Critical system identification

  governance

• Identify 3

  Cyber risk assessment

  risk management

Getting started

1. Open Framework Library and activate IFSCA
2. Review the control list and prioritize high-impact domains
3. Attach policies, procedures, and technical evidence
4. Mark controls audit-ready and monitor residual gaps