The Central Depository Services (India) Limited (CDSL) on March 05, 2026, issued a notification regarding SOP for Handling Cyber Incident and Amendments to DP Operating Instructions Annexure 11.1.
The following has been stated: -
•Central Depository Services Limited (CDSL) has updated its DP Operating Instructions (Annexure 11.1 Penalty Structure) to incorporate a Standard Operating Procedure (SOP) for handling cybersecurity incidents, in coordination with other depositories and exchanges.
•Depository Participants (DPs) and members are required to report any cybersecurity incident within 6 hours of detection or notification.
•In case of technical difficulty, incidents may be reported via email in the prescribed format to the common email ID specified by SEBI/MIIs.
•The updated SOP also provides precautionary and containment measures to prevent malware or threats from spreading across depository, exchange, or member networks.
The detailed notification is given in the document below.
[Notification No.: CDSL/AUDIT/DP/POLCY/2026/151]
