The Securities and Trade Board of India (SEBI) has levied a high quality of Rs 5.05 crore on the Indian Clearing Company Ltd (ICCL) for numerous violations. The violations included submitting the Community Audit Report back to SEBI with out Governing Board feedback and never sustaining right and up-to-date asset stock, in addition to incorrectly classifying mission-critical servers.
SEBI’s Quasi Judicial Authority, G Ramar, referenced the Dr. Bimal Jalan Committee’s report on ‘Evaluate of Possession And Governance Of Market Infrastructure Establishments (MIIs)’ from November 2010 within the order issued on February 25.
ICCL, established in 2007 as an entirely owned subsidiary of BSE Ltd, underwent an inspection by SEBI for the interval of December 1, 2022, to July 31, 2023. In the course of the inspection, non-compliance with key regulatory provisions, significantly in cybersecurity and catastrophe restoration, was famous.
The principle allegations embody:
Failure to stick to the Cyber Safety and Cyber Resilience Framework:
ICCL uncared for to take care of an up-to-date stock of IT property, together with software program property and criticality classification.
Regardless of conducting the required audit, ICCL didn’t promptly handle cyber audit observations inside the specified timeframe.
Failure to satisfy System and Community Audit Necessities:
ICCL submitted the Community Audit Report back to SEBI with out enter from administration or the Board.
Whereas the ICCL Board later claimed to have resolved all audit observations, SEBI found unresolved IT asset stock points.
Non-compliance with Enterprise Continuity Plan (BCP) and Catastrophe Restoration (DR) Pointers:
The configuration of main servers (PDC) and catastrophe restoration servers (DRS) didn’t align, in violation of SEBI’s requirement for a one-to-one correspondence.
The committee report acknowledged: “These establishments (i.e., inventory exchanges, depositories and clearing companies) are systemically vital for the nation’s monetary improvement and function the infrastructure needed for the securities market. These establishments are collectively known as Market Infrastructure Establishments (MIIs)… They’re, due to this fact, ‘very important financial infrastructure’. The current monetary disaster has proven the significance of monetary establishments to financial stability.”
The regulator requested ICCL to pay the penalty inside 45 days of receiving its order.
