# SEBI Cybersecurity & Cyber Resilience Framework

> India

SEBI's CSCRF is a 5-tier framework covering 22 entity types, mandating VAPT, cyber audit, red teaming, threat hunting, a Market-SOC, ISO 27001, a CISO, incident reporting and the full NIST CSF 2.0 control catalogue. We take you from tier classification to audited compliance.

## Who needs to comply

SEBI-regulated entities - stock exchanges, depositories, brokers, AMCs, RTAs and more.

## Key requirements

- **Full framework** - VAPT, red team, threat hunting, M-SOC, governance and NIST CSF 2.0 controls.
- **Tier-based scoping** - We determine your tier and tailor obligations accordingly.
- **Cyber audit & evidence** - Audit report and evidence pack for SEBI submission.

---
Related services: https://a5cyber.com/services/sebi-cscrf-audit/, https://a5cyber.com/services/mdr-soc/, https://a5cyber.com/services/red-team/