FAQS
CSCRF is SEBI's Cybersecurity and Cyber Resilience Framework, issued on 20 August 2024. It replaced SEBI's earlier cybersecurity circulars with one framework for all SEBI-regulated entities, covering governance, data protection, monitoring, incident response and recovery.
All SEBI-regulated entities, including stock exchanges, depositories, clearing corporations, stock brokers, depository participants, mutual funds and AMCs, RTAs and KRAs. Entities are grouped into five categories: market infrastructure institutions, qualified REs, mid-size REs, small-size REs and self-certification REs. Larger categories have more obligations.
SEBI extended the timeline more than once. Under its circular dated 30 June 2025, most regulated entities had to comply by 31 August 2025. Market infrastructure institutions, KRAs and qualified RTAs were not given that extension and had to follow the earlier timeline.
No. The cyber audit is done by your auditor. TeamSync helps by keeping the records the audit asks for, such as access logs, data classification, retention rules and incident records, in one place with a tamper-evident audit trail.
Yes. TeamSync can be deployed on-premise, in a private cloud or in an air-gapped network, so your documents and logs stay inside infrastructure you control.