IRDAI Cybersecurity Framework

Overview

IRDAI Cybersecurity Framework (IRDAI) — Insurance Regulatory and Development Authority of India cybersecurity framework for insurers — governance, protection, detection, response, and third-party risk. ComplAI maps this framework’s controls so your team can track implementation, evidence, and audit readiness.

14 controls available in ComplAI for this framework.

Who it's for

• Organizations that must demonstrate IRDAI compliance
• Security and compliance teams operating in India
• Customers and partners that require IRDAI assurance

Why it matters

IRDAI is a recognized financial framework. Activating it in ComplAI lets you manage controls, evidence, and readiness in one place.

How ComplAI helps

• Activate IRDAI in the Framework Library to load its control catalog
• Assign owners, track compliance status, and attach evidence per control
• Use risk register and issues workflows when controls fail or deviate
• Export readiness views for leadership and auditors

Sample controls

• Gov 1

  Board oversight of cyber resilience

  governance

• Gov 2

  Cybersecurity policy

  governance

• Gov 3

  CISO appointment

  governance

• Identify 1

  Asset inventory

  asset management

• Identify 2

  Critical system identification

  governance

• Protect 1

  Access control and MFA

  access control

Getting started

1. Open Framework Library and activate IRDAI
2. Review the control list and prioritize high-impact domains
3. Attach policies, procedures, and technical evidence
4. Mark controls audit-ready and monitor residual gaps