SEBI CSCRF · vCybersecurity and Cyber Res…
SEBI CSCRF
SEBI CSCRF — 100% of in-scope requirements covered.
6 requirements · 2 in scope (2 enforced) · 4 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.
Source: Securities and Exchange Board of India — Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI-regulated entities
By category
| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
|---|---|---|---|---|---|---|
| SEBI CSCRF | 6 | 2 | 0 | 0 | 0 | 100% |
Every requirement → the KYE™ artefact that enforces it
| ID | Title | Status | KYE™ enforcement |
|---|---|---|---|
sebi-cyber-resilience.RESPOND-AUTHORITY |
Incident-response actions taken under resolved authority and sealed | enforced | audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1engines: internalconstitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/13-RESILIENCE-LOOP.md |
sebi-cyber-resilience.EVIDENCE-RETENTION |
Retention of security event records supporting audit and forensic review | enforced | audit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md, constitution/35-STREAMING-LOGS.md |
sebi-cyber-resilience.IDENTIFY-PROTECT |
Asset identification and protective controls across the estate | out-of-scope | constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md |
sebi-cyber-resilience.DETECT-MONITOR |
Continuous monitoring and detection of cyber events | out-of-scope | constitution_refs: constitution/13-RESILIENCE-LOOP.md |
sebi-cyber-resilience.INCIDENT-REPORTING |
Reporting of cyber incidents to SEBI within prescribed timelines | out-of-scope | constitution_refs: constitution/13-RESILIENCE-LOOP.md |
sebi-cyber-resilience.RECOVER |
Recovery and restoration capability with defined objectives | out-of-scope | constitution_refs: constitution/51-NO-SPOF.md |