New Delhi, August 17, 2026 (Yes Punjab News)
The Securities and Exchange Board of India (SEBI) on Monday launched two initiatives aimed at strengthening cybersecurity, incident reporting and information sharing across the securities market ecosystem.
SEBI Chairman Tuhin Kanta Pandey announced the revamped Incident Reporting Portal and the new Cyber Suraksha Portal while addressing the SEBI Symposium on Cyber Defence.
Pandey said cyber threats could move beyond individual organisations and regulatory jurisdictions, potentially affecting interconnected institutions and even crossing national borders.
“Cyber threats do not respect organisational boundaries. They do not respect regulatory boundaries. And they certainly do not respect national borders,” he said.
The revamped SEBI Incident Reporting Portal is designed to make the reporting of cybersecurity incidents more structured, timely and actionable. It is aligned with the Financial Stability Board’s (FSB) Format for Incident Reporting Exchange (FIRE), which aims to standardise incident reporting and facilitate cross-border information exchange.
The Cyber Suraksha Portal will function as a central platform for stakeholders to share cybersecurity-related information. It will support the exchange of knowledge, vulnerability alerts, policy measures and lessons emerging from cyber incidents.
Pandey said the initiatives should not be viewed merely as technology platforms, stressing that their effectiveness would depend on institutions using them to share information, learn from incidents and respond quickly to emerging threats.
He said a cyberattack affecting one organisation could provide lessons that help protect other institutions, while effective cybersecurity practices developed by regulators or countries could be adopted more widely across the financial ecosystem.
The SEBI chief also underlined that cyber resilience should not be understood as an attempt to ensure that systems are never attacked. Instead, he said, institutions must build the capacity to anticipate threats, withstand attacks, respond effectively, recover quickly and learn from incidents.
“Cyber resilience does not mean assuming that our systems can never be attacked. It means building the capability to anticipate, withstand, respond to, recover from and learn from an attack,” Pandey said.
FOLLOW NOW
