# IRDAI Cyber Security Guidelines

> India

IRDAI's information and cyber-security guidelines require insurers and intermediaries to implement governance, access control, encryption, incident management and third-party controls, with periodic audit - including ISNP audits.

## Who needs to comply

Insurers, reinsurers and insurance intermediaries regulated by IRDAI.

## Key requirements

- **Governance & controls** - Security governance, access, encryption and incident management.
- **ISNP audits** - Insurance Self-Network Platform audit coverage.
- **Third-party risk** - Vendor and outsourcing security controls.

---
Related services: https://a5cyber.com/services/irdai-cyber-audit/, https://a5cyber.com/services/cert-in-audit/, https://a5cyber.com/services/compliance-advisory/