SEBI Cybersecurity and Cyber Resilience Framework

Overview

SEBI Cybersecurity and Cyber Resilience Framework (SEBI CSCRF) — SEBI framework for cyber resilience of regulated entities in Indian capital markets — governance, protection, detection, response, recovery, and third-party risk. ComplAI maps this framework’s controls so your team can track implementation, evidence, and audit readiness.

28 controls available in ComplAI for this framework.

Who it's for

• Organizations that must demonstrate SEBI CSCRF compliance
• Security and compliance teams operating in India
• Customers and partners that require SEBI CSCRF assurance

Why it matters

SEBI CSCRF is a recognized financial framework. Activating it in ComplAI lets you manage controls, evidence, and readiness in one place.

How ComplAI helps

• Activate SEBI CSCRF in the Framework Library to load its control catalog
• Assign owners, track compliance status, and attach evidence per control
• Use risk register and issues workflows when controls fail or deviate
• Export readiness views for leadership and auditors

Sample controls

• Gov 1

  Board and senior management oversight

  governance

• Gov 2

  Cybersecurity policy and standards

  governance

• Gov 3

  CISO and cyber governance structure

  governance

• Gov 4

  Cyber risk assessment program

  risk management

• Identify 1

  Asset inventory and classification

  asset management

• Identify 2

  Critical system identification

  governance

Getting started

1. Open Framework Library and activate SEBI CSCRF
2. Review the control list and prioritize high-impact domains
3. Attach policies, procedures, and technical evidence
4. Mark controls audit-ready and monitor residual gaps