- Home
- Compliance
- SEBI Compliance Audit
Regulatory compliance
SEBI Compliance Audit
SEBI's Cybersecurity and Cyber Resilience Framework (CSCRF) sets graded cybersecurity requirements for regulated entities, from stock brokers to market infrastructure institutions. We help you understand your category, close gaps and prepare for audit.
Why teams choose Adiroha
- Led by CISA and ISO 27001 lead auditors
- Clear scope, roadmap and timeline before we start
- Evidence organised in the Cydital platform
- Support through the external audit and beyond
Scope
What we cover
- Regulated-entity categorisation under CSCRF
- Gap assessment against CSCRF requirements
- Governance, policy and cyber resilience controls
- SOC, monitoring and incident response readiness
- VAPT and cyber audit execution
- Compliance reporting to SEBI
Deliverables
What you receive
- CSCRF gap report
- Cyber audit report
- Remediation roadmap
- Compliance evidence pack
How we work
Discover. Assess. Remediate. Validate.
Discover
Understand your business, scope, stakeholders and the obligations that actually apply to you.
Assess
Gap assessment against the framework or regulation, turned into a prioritised, costed roadmap.
Remediate
Implement policies, controls and evidence with your teams, tracked in Cydital.
Validate
Internal audit before the external one, audit-day support, and continuous compliance after.
FAQ
Common questions
Which entities does CSCRF apply to?
A wide range of SEBI-regulated entities, including stock brokers, depository participants, mutual funds, AMCs and market infrastructure institutions, with requirements graded by category.
Does CSCRF replace earlier SEBI cyber circulars?
CSCRF consolidated SEBI's earlier cybersecurity circulars into a single framework.
How do we know which CSCRF category we fall into?
SEBI categorises regulated entities based on factors such as type and scale. We help you confirm your category and the requirements that apply.
Does CSCRF require a SOC?
Many regulated entities are expected to have security operations capability, either in-house or through a managed service. Our managed SOC can help.
Can you prepare our compliance submissions?
Yes. We help prepare the reports and evidence SEBI expects, based on your category's requirements.
Related
Related services
CERT-In Security Audit
Assessment against CERT-In Cyber Security Directions — incident reporting, log retention, time sync and security audit requirements.
Learn moreSAR Compliance Audit
Readiness and support for RBI's System Audit Report on payment data localisation for payment system operators.
Learn moreDPDP Act 2023
DPDP Act 2023 readiness — data mapping, consent, notices, data principal rights, breach response and Significant Data Fiduciary obligations.
Learn moreTalk to a specialist about SEBI Compliance Audit.
A free 30-minute consultation to understand your scope and timeline. We follow up with a fixed proposal.