Central Depository Services Limited (CDSL) has updated DP Operating Instructions – Annexure 11.1 (Penalty Structure for Cyber Security Incidents) in coordination with other Depositories and Exchanges.
Standard Operating Procedure (SOP) issued for handling cyber security incidents.
Depository Participants (DPs) / Members must report cyber incidents within 6 hours of detection or awareness.
If system reporting is not possible, incidents can be reported via email in the prescribed format to the common email ID specified by Securities and Exchange Board of India (SEBI) / MIIs.
Depositories/Exchanges may implement precautionary containment measures to prevent spread of threats or malware.
DPs should take note and comply with the updated instructions.