SEBI has clarified that its cybersecurity framework applies only to systems exclusively used for regulated activities, accepting RBI-equivalent compliance. Critical systems are defined broadly, encompassing core operations and client-facing applications. Zero-trust principles are encouraged, while mobile app guidelines are recommendatory. The regulator also revised thresholds for regulated entities, categorizing Portfolio Managers by AUM and Merchant Bankers based on activity.
Sebi imposes Rs 10 lakh fine on Anand Rathi for violation of stock brokers’ norms
India’s market regulator Sebi fined Anand Rathi Share and Stock Brokers ₹10 lakh after inspections found multiple regulatory violations, including delayed glitch reporting, excessive capacity
March 13, 2026