SEBI/HO/ ITD -1/ITD_CSC_EXT/P/CIR/2025/60 — THE SECURITIES AND EXCHANGE BOARD OF INDIA ACT, 1992

/ CIRCULAR SEBI/HO/ ITD -1/ITD_CSC_EXT/P/CIR/2025/60 To, All Alternative Investment Funds (AIFs) All Depositories All Depository Participants through Depositories All Investment Advisors (IAs) / Research Analysts (RAs) All KYC Registration Agencies (KRAs) All Merchant Bankers All Portfolio Managers All Registrar to an Issue and Share Transfer Agents (RTAs) All Stock Brokers through Exchanges All Stock Exchanges All Venture Capital Funds (VCFs) Association of Investment Bankers of India Association of Portfolio Managers in India (APMI) BSE Limited (Investment Adviser Administration and supervisory bodyIAASB) BSE Limited (Research Analysts Administration and supervisory bodyRAASB) Sir / Madam, Subject: Clarifications to Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (REs) Securities and Exchange Board of India (SEBI) has issued 'Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (REs)' vide circular SEBI/HO/ ITD -1/ITD_CSC_EXT/P/CIR/2024/113 dated August 20, 2024. Upon receipt of various queries from REs seeking extension and clarification on April 30, 2025 the aforementioned circular, SEBI has also issued 'Clarifications to Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (REs)' vide circular SEBI/HO/ ITD -1/ITD_CSC_EXT/P/CIR/2024/184 dated December 31, 2024 and 'Extension towards Adoption and Implementation of Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (REs)' vide circular SEBI/HO/ITD -1/ ITD_CSC_EXT/P/ CIR/2025/45 dated March 28, 2025 . Based on further discussions with REs , it has been decided to revise the thresholds and categorization of following REs as contained in this circular . It may be noted that the category of REs shall be d