Quick Links
Connect us
Directors Databank (Empannel Yourself)
Become a 
Become a 
Blog
Become an Awards Assessor
Publications
Contact Us
Latest from the Regulator - August 2026
1. Alignment of SEBI's Cyber Incident Reporting Portal with
FIRE Format
With the growing frequency and sophistication of cyber incidents in the securities market, SEBI has aligned its Cyber Incident Reporting Portal with the FIRE (Financial Information Reporting and Exchange) Framework developed by the Financial Stability Board (FSB). The move aims to streamline cyber-incident reporting through common information fields, standardised definitions and consistent classification.
Key Highlights:
• Structured reporting: The portal will enable reporting in stages, from initial notification through interim updates to final closure.
• Greater consistency: The FIRE format promotes harmonised cyber-incident reporting across sectors and jurisdictions.
• Faster response: Timely reporting is intended to support quicker containment, mitigation and strengthening of cyber defences.
For more details, please visit:
2. SEBI Strengthens IT Resilience Framework for Market Infrastructure Institutions
Infrastructure Institutions
SEBI has introduced an IT Resilience Index (ITRI) to assess the health, performance, safety and operational resilience of critical IT systems across Market Infrastructure Institutions (MIIs), including stock exchanges, depositories and clearing corporations. The framework shifts the emphasis from responding to technology failures towards anticipating and preventing disruptions.
Key Highlights:
• Automated assessment: ITRI calculations will be generated directly from IT systems, with manual exceptions requiring SCOT approval.
• Early-warning systems: MIIs must identify potential system weaknesses and slowdowns before they develop into major outages.
• Real-time monitoring: Dashboards will continuously track service delivery and system performance.
• Board accountability: ITRI will be calculated every six months, with trends and corrective actions reported to governing boards within 60 days.
• Implementation: Sub-parameters are due by 30 November 2026, SOPs by 31 January 2027, and full operationalisation by 28 February 2027.
3. RBI's Re-KYC Deadline Puts Merchant Payment Continuity Under Pressure
Continuity Under Pressure
The RBI's 15 September 2026 deadline for re-KYC of existing merchants is creating operational pressure across the payments ecosystem. Industry estimates cited in the source suggest that 30–35% of small offline merchants using QR-based UPI payments and around one million small online businesses could be at risk of missing the verification window.
Key highlights:
• Payment continuity risk: Non-compliant merchants may face suspension of payment services.
• Documentation challenge: Informal and individually operated businesses may face greater difficulty meeting requirements.
• Operational constraints: Payment aggregators face capacity pressures as in-person KYC must be undertaken by their own employees.
Back to HomeAuthor
Institute of Directors India
Bringing a Silent Revolution through the Boardroom
Institute of Directors (IOD) is an apex national association of Corporate Directors under the India's 'Societies Registration Act XXI of 1860'. Currently it is associated with over 31,000 senior executives from Govt, PSU and Private organizations of India and abroad.
Owned by: Institute of Directors, India
Disclaimer: The opinions expressed in the articles/ stories are the personal opinions of the author. IOD/ Editor is not responsible for the accuracy, completeness, suitability, or validity of any information in those articles. The information, facts or opinions expressed in the articles/ speeches do not reflect the views of IOD/ Editor and IOD/ Editor does not assume any responsibility or liability for the same.
