CDSL Circular on Quarterly Cyber Incident Reporting by DPs
8 views
Skip to first unread message
secmarkupdates
Jul 2, 2026, 3:27:19 AMJul 2
to UPDATES from SecMark
Date of Issue: 30-06-2026
Highlights of the Circular :
DPs are advised to refer to SEBI circular No: SEBI/HO/MIRSD/TPD/P/CIR/2022/93 dated June 30, 2022, and CDSL/OPS/DP/POLCY/2025/27 January 10, 2025, wherein all Cyber-attacks, threats, cyber-incidents and breaches experienced by Depositories Participants shall be reported to CDSL.
In view of the above, Depository Participants are required to submit the Quarterly Cyber Incident Report through the audit web portal. In case no cyber incident has occurred during the quarter, Depository Participants may select the option “No” under Cyber- attack/Breach observed in the Quarter.
Depository Participants must submit a mandatory quarterly report to CDSL on all the cyberattacks, threats, incidents, breaches, within 15 days after the end of each quarter.
The deadline for quarterly cyber incident reporting for the Q1 (April– June 2026) is 15th July 2026 in audit web portal, failing which will be treated as non-compliance and penalty will be levied as per communique no: CDSL/AUDIT/DP/POLCY/2025/105 February 12, 2025.
For submitting the quarterly cyber incident report to CDSL, please refer Annexure A.
Highlights of the Circular :
DPs are advised to refer to SEBI circular No: SEBI/HO/MIRSD/TPD/P/CIR/2022/93 dated June 30, 2022, and CDSL/OPS/DP/POLCY/2025/27 January 10, 2025, wherein all Cyber-attacks, threats, cyber-incidents and breaches experienced by Depositories Participants shall be reported to CDSL.
In view of the above, Depository Participants are required to submit the Quarterly Cyber Incident Report through the audit web portal. In case no cyber incident has occurred during the quarter, Depository Participants may select the option “No” under Cyber- attack/Breach observed in the Quarter.
Depository Participants must submit a mandatory quarterly report to CDSL on all the cyberattacks, threats, incidents, breaches, within 15 days after the end of each quarter.
The deadline for quarterly cyber incident reporting for the Q1 (April– June 2026) is 15th July 2026 in audit web portal, failing which will be treated as non-compliance and penalty will be levied as per communique no: CDSL/AUDIT/DP/POLCY/2025/105 February 12, 2025.
For submitting the quarterly cyber incident report to CDSL, please refer Annexure A.
Reply all
Reply to author
Forward
0 new messages