Member’s attention is drawn to the Exchange Circular No 20190716-9 dated July 16, 2019 conveying the reporting of cyber security incidents as per SEBI circular No SEBI/HO/MIRSD/CIR/PB/2018/147 dated December 3, 2019 on the subject matter.
SEBI circular’s para 52 in Annexure I states that -
“Quarterly reports containing information on cyber-attacks and threats experienced by Stock Brokers / Depository Participants and measures taken to mitigate vulnerabilities, threats and attacks including information on bugs / vulnerabilities / threats that may be useful for other Stock Brokers / Depository Participants should be submitted to Stock Exchanges / Depositories. “
Members are thus requested to report any cyber security incident(s) impacting the business on quarterly basis. The scanned copy of the report should be duly signed by the Designated Officer appointed in terms of para 6 of the said SEBI Circular dated December 03, 2018 and shall be submitted in the format as provided as ReportingFormat to this circular. The report for the first quarter ending on June 30, 2019 shall be submitted on or before August 30, 2019. Henceforth, the same shall be submitted within 15 days from the end of respective quarter.
Further, the Designated Officer on receipt of any information with respect to the unusual activities and events as prescribed in para 8 of the said SEBI Circular dated December 03, 2018, shall inform the Exchange within 24 hours of receipt of such information.
The report format is attached as Reporting Format. Part I of the form is mandatory, part II is to be submitted in case an incident has occurred which impacted the business. While the exchange shall be providing an electronic interface to submit this report shortly which shall be notified by a separate circular, the aforementioned report and information about unusual activities/events shall be send to bsemsoc@bseindia.com ,till such time. In case any queries, members may contact on 022-22728670 or write to Shuchi.shah@bseindia.com.
All Members are advised to take note and comply.
For and on behalf of BSE Ltd,
|
Shri. Devendra Kulkarni
DGM – Information Security
|
Shri. Shivkumar Pandey
Chief Information Security Officer
|
|