# Sebi proposes extending IT, cyber security framework of MIIs to their arms — retained record

> Retained news record from news:india-et-markets.

Canonical: https://highsignal.app/data/records/482b7e1b9ba7af9a

[← sources](https://highsignal.app/data)


source: [news](https://highsignal.app/data/news) (news:india-et-markets)  published 2026-09-11 11:26 ingested 2026-09-12 02:58

[original source ↗](https://economictimes.indiatimes.com/markets/stocks/news/sebi-proposes-extending-it-cyber-security-framework-of-miis-to-their-arms/articleshow/134063604.cms)

## retained text



```
While MIIs are governed by Sebi and operate in compliance with its IT and cybersecurity frameworks, the applicability and regulatory jurisdiction of these framework are not explicitly defined over their subsidiaries.
The move comes even as Sebi highlighted that there could be a case for MIIs to take services of their subsidiaries to carry out certain activities.
These subsidiaries may need to operate in close coordination with the parent MII and might use shared technology infrastructure, applications, market data or other critical IT resources.
"As MIIs continue to diversify their business models through subsidiaries, extending the applicability of the framework would ensure that the regulatory framework remains aligned with the evolving market structure," Sebi said in its consultation paper.
Under the proposal, the IT and cyber security framework applicable to the parent MII will also apply to any subsidiary undertaking activity that directly contributes to that MII's domain.
In other words, the subsidiary is carrying out an activity which the MII is supposed to do, handling data that the MII is supposed to handle or sharing infrastructure with MII.
Such subsidiaries will comply with all applicable requirements relating to cyber security, system audits, incident reporting and technology governance.
The IT and cyber security framework applicable to the parent MII will not apply to the subsidiary if the arm does not meet any of these three criteria, Sebi said.
If an MII believes its IT and cyber security framework should not be extended to a subsidiary that only meets the condition of sharing IT infrastructure with the MII, it must follow prescribed steps to seek an exemption.
Such MIIs may seek exemption from Sebi regarding not extending the IT and cyber framework to that subsidiary.
Such proposals must include details of compensatory controls put in place/ proposed to be put in place by MIIs to ensure that the cyber and IT resilience of MIIs is not affected, along with the views of SCOT (Standing Committee on Technology) and the board of the MIIs, the regulator said.
The Securities and Exchange Board of India (Sebi) has sought public comments till October 2 on the proposal.
(What's moving Sensex and Nifty Track latest market news, stock tips, Budget 2025, Share Market on Budget 2025 and expert advice, on ETMarkets. Also, ETMarkets.com is now on Telegram. For fastest news alerts on financial markets, investment strategies and stocks alerts, subscribe to our Telegram feeds .)
Subscribe to ET Prime and read the Economic Times ePaper Online.and Sensex Today.
Top Trending Stocks: SBI Share Price, Axis Bank Share Price, HDFC Bank Share Price, Infosys Share Price, Wipro Share Price, NTPC Share Price
(What's moving Sensex and Nifty Track latest market news, stock tips, Budget 2025, Share Market on Budget 2025 and expert advice, on ETMarkets. Also, ETMarkets.com is now on Telegram. For fastest news alerts on financial markets, investment strategies and stocks alerts, subscribe to our Telegram feeds .)
Subscribe to ET Prime and read the Economic Times ePaper Online.and Sensex Today.
Top Trending Stocks: SBI Share Price, Axis Bank Share Price, HDFC Bank Share Price, Infosys Share Price, Wipro Share Price, NTPC Share Price
```



document fetched 2026-09-12 02:58