The SEBI Cyber Security and Resilience Framework Audit evaluates efficiency of a company's measures and standards to maintain cyber security and its potential to recover from incidents. It also ensures that the company complies with regulations and guidelines set by SEBI.
Core Functions:
- Evaluating effectiveness of measures taken to protect against cybersecurity threats.
- Assessing the ability and time taken to recover from cyber attacks and threats.
- Ensuring that the company follows cybersecurity regulations, guidelines, and protocols set by SEBI.
- Reviews process for detecting, managing, and responding to cyber threats, incidents, and breaches.
Key Systems:
- Network Security Systems: Firewalls, detection for unauthorized access, prevention systems, and overall secure network topology.
- Data Protection Systems: Providing technologies with encryption, DLP (Data Loss Prevention) systems, and secure storage solutions for data security.
- Incident Response Systems: Tools and environments for detecting, reporting, and handling cyber threats, including SIEM (Security Information and Event Management) systems.
- Recovery Systems: Systems that focus on ensuring data recovery options in case of cyber attacks or breaches.