The Central Depository Services (India) Limited (CDSL) on January 10, 2025, notified regarding the immediate cyber incident & quarterly cyber incident reporting by DPs.
The following has been stated namely: -
• DPs informed that CDSL has developed a facility for online submission of cyber incident reporting through audit web portal.
• It states that incidents shall be reported to CERT-In as per guidelines and to NCIIPC for systems identified as "Protected Systems" by NCIIPC.
• It further states that Stock Brokers/DPs shall submit mandatory quarterly reports to Stock Exchanges/Depositories on cyber-attacks, threats, incidents, breaches, and mitigation measures, including useful information on vulnerabilities, within 15 days after the end of each quarter i.e. Apr-June (Q1), Jul-Sep (Q2), Oct-Dec (Q3), Jan-Mar (Q4).
[Circular no. - CDSL/OPS/DP/POLCY/2025/27]
