SEBI CSCRF

SEBI CSCRF — 100% of in-scope requirements covered.

6 requirements · 2 in scope (2 enforced) · 4 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

SEBI CSCRF: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. RESPOND-AUTHORITY · enforced

    Incident-response actions taken under resolved authority and sealed

    Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1 · Constitution: 12 purpose permission, 13…

  2. EVIDENCE-RETENTION · enforced

    Retention of security event records supporting audit and forensic review

    Audit events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1 · Constitution: 30 audit worm retention, 35 streaming logs

  3. IDENTIFY-PROTECT · out-of-scope

    Asset identification and protective controls across the estate

    Constitution: 30 audit worm retention

  4. DETECT-MONITOR · out-of-scope

    Continuous monitoring and detection of cyber events

    Constitution: 13 resilience loop

  5. INCIDENT-REPORTING · out-of-scope

    Reporting of cyber incidents to SEBI within prescribed timelines

    Constitution: 13 resilience loop

  6. RECOVER · out-of-scope

    Recovery and restoration capability with defined objectives

    Constitution: 51 no spof

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: Securities and Exchange Board of India — Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI-regulated entities

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
SEBI CSCRF62000100%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
sebi-cyber-resilience.RESPOND-AUTHORITYIncident-response actions taken under resolved authority and sealedenforcedaudit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1, kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1
engines: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/13-RESILIENCE-LOOP.md
sebi-cyber-resilience.EVIDENCE-RETENTIONRetention of security event records supporting audit and forensic reviewenforcedaudit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.compliance.attestation.v1
constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md, constitution/35-STREAMING-LOGS.md
sebi-cyber-resilience.IDENTIFY-PROTECTAsset identification and protective controls across the estateout-of-scopeconstitution_refs: constitution/30-AUDIT-WORM-RETENTION.md
sebi-cyber-resilience.DETECT-MONITORContinuous monitoring and detection of cyber eventsout-of-scopeconstitution_refs: constitution/13-RESILIENCE-LOOP.md
sebi-cyber-resilience.INCIDENT-REPORTINGReporting of cyber incidents to SEBI within prescribed timelinesout-of-scopeconstitution_refs: constitution/13-RESILIENCE-LOOP.md
sebi-cyber-resilience.RECOVERRecovery and restoration capability with defined objectivesout-of-scopeconstitution_refs: constitution/51-NO-SPOF.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.