CSCRF
Cyber Security & Cyber Resilience Framework (CSCRF)
Comprehensive support for AIFs to achieve and maintain SEBI CSCRF compliance.
Get compliantOverview
Overview
The Cyber Security and Cyber Resilience Framework (CSCRF), as mandated by SEBI (Circular No. SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113), has introduced a stringent regulatory standard for all SEBI-regulated entities, including Alternative Investment Funds (AIFs). Navigate AIF offers end-to-end CSCRF audit and implementation support tailored for AIFs to align with SEBI's expectations and strengthen cybersecurity posture.
Requirements
CSCRF requirements by Navigate AIF
Requirements vary by RE size. Navigate AIF supports all categories.
| Requirements | Self Certified REs Corpus < 3000 Cr | Small Size REs 3000 Cr < Corpus < 10,000 Cr | Mid-Size REs Corpus > 10,000 Cr |
|---|---|---|---|
| Implementation of Policies | ✓ | ✓ | ✓ |
| VAPT Audit through CERT-In empanelled firm | ✓ | ✓ | ✓ |
| Submitting Self-Certification | ✓ | ✓ | ✓ |
| Cybersecurity training program | ✓ | ✓ | ✓ |
| Background Checks and NDAs with third party vendors | ✓ | ✓ | ✓ |
| Appoint Designated Officer | ✓ | ✓ | ✓ |
| Market SOC | ✓* | ✓ | ✓ |
| Cyber Audit | ✗ | ✓ | ✓ |
| Review contingency + continuity of operations plan | ✗ | ✓ | ✓ |
| Evaluation of cyber resilience posture | ✗ | ✓ | ✓ |
| Cyber Risk Management Framework | ✗ | ✗ | ✓ |
| Year Risk Assessment | ✗ | ✗ | ✓ |
| Allocate % of total IT budget to cybersecurity | ✗ | ✗ | ✓ |
| Employee Due Diligence | ✗ | ✗ | ✓ |
| Setup an IT Committee (Not Mandatory for Small and Self-certified REs) | ✗ | ✗ | ✓ |
* Self Certified REs with fewer than 100 clients are exempt from Market SOC.
Why us
Why work with us?
Expertise, end-to-end support, and AIF-specific compliance guidance.
Expertise & tailored support
Leverage our in-depth knowledge of SEBI regulations and cybersecurity standards, customized to your organization's needs.
End-to-end assistance
All CSCRF compliance requirements—audit, policies, and more—completed so you remain fully compliant.
Resources
CSCRF timeline & resources
Key circulars, clarifications, and implementation extensions.
Technical Clarifications to CSCRF for SEBI REs
Technical clarifications to Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities.
Extension towards Adoption and Implementation of CSCRF
Extension for SEBI Regulated Entities (REs).
FAQs on CSCRF and Cloud Services Framework
FAQs on CSCRF for SEBI REs and Framework for Adoption of Cloud Services.
Latest Clarifications to CSCRF
Clarifications to CSCRF for SEBI Regulated Entities (REs).
Extension of Implementation Timeline
Extension towards Adoption and Implementation of CSCRF for SEBI REs.
CSCRF Clarifications
Clarifications to CSCRF for SEBI Regulated Entities (REs).
Initial CSCRF Framework
Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (REs).
