{"id":436,"date":"2025-04-16T10:28:05","date_gmt":"2025-04-16T10:28:05","guid":{"rendered":"https:\/\/rnmcapital.in\/rnm-capital-trust\/?p=436"},"modified":"2025-04-16T10:46:19","modified_gmt":"2025-04-16T10:46:19","slug":"ifsc-press-release-on-fatf-feb-2025-high-risk-review","status":"publish","type":"post","link":"https:\/\/rnmcapital.in\/rnm-capital-trust\/ifsc-press-release-on-fatf-feb-2025-high-risk-review\/","title":{"rendered":"Press release by IFSCA on FATF&#8217;s February 2025 Review of High-Risk Jurisdictions\u00a0"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Introduction:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Financial Action Task Force (FATF) issued a public statement on February 21, 2025, regarding jurisdictions with strategic deficiencies in Anti-Money Laundering (AML) and Combating Financing of Terrorism (CFT).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Key Points:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FATF called attention to previous statements from February 2020 and October 2022.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Jurisdictions identified with deficiencies that have an action plan include Algeria, Angola, Bulgaria, Burkina Faso, Cameroon, C\u00f4te d&#8217;Ivoire, Croatia, Democratic Republic of the Congo, Haiti, Kenya, Lao PDR, Lebanon, Mali, Monaco, Mozambique, Namibia, Nepal, Nigeria, South Africa, South Sudan, Syria, Tanzania, Venezuela, Vietnam, &amp; Yemen.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 The Philippines has been removed from the list of jurisdictions under increased monitoring.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Regulated entities are still allowed to engage in legitimate transactions with these jurisdictions.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>On March 07, 2025 IFSCA issued a circular for Consultation Paper on Oilfield Equipment Leasing. This consultation paper aims to gather public views on a proposal from the Authority to classify &#8220;oilfield equipment&#8221; for leasing under specific government notifications. This classification would allow for its leasing to be recognized as a financial product.&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Key Points:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. The Authority seeks comments on specifying &#8220;oilfield equipment&#8221; under the powers given by the Indian government\u2019s notification from December 14, 2021.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Once specified, the operating lease of oilfield equipment will be categorized as a financial product according to the IFSCA Act, 2019.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. The proposed definition for &#8220;oilfield equipment&#8221; will mirror the list from the GST notification regarding supplies for exploration and production.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4. The leasing frameworks may include ownership or lease-in-lease-out options by financial institutions in the IFSC.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">5. Oilfield equipment encompasses tools and machinery used for exploration, extraction, and production of oil and gas.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">6. The global oilfield equipment leasing market represents 6-7% of total equipment leasing, growing steadily, with significant advancements in many countries, including those in Asia-Pacific.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">7. India heavily relies on imported oilfield equipment. Recent policies aim to boost domestic exploration to reduce this dependency, forecasting increased demand for such equipment.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">8. Leasing oilfield equipment could prove to be a cost-effective strategy for Indian companies, with interest expressed from stakeholders regarding leasing frameworks.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Conclusion:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The proposal aims to create an operational framework for leasing oilfield equipment, thus supporting increased oil exploration in India and positioning GIFT IFSC as a regional leasing hub. Public input is welcomed to assess the effectiveness and practicality of this proposal.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>On March 07 2025, IFSCA released circular to notify updated Fee Structure for ITFS Operators\/Applicants in IFSC&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Introduction&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This circular outlines the fee structure for International Trade Finance Service (ITFS) operators and applicants intending to set up an ITFS in the International Financial Services Centre (IFSC).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Key Points&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Effective April 01, 2025, a specific fee structure will apply.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 <strong>Application fee:<\/strong> $1,000&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 <strong>Registration fee<\/strong>: $10,000&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 <strong>Processing fee<\/strong>: 20% of registration fee (relaxation waiver of guidelines &#8211; $500)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 <strong>Recurring fee<\/strong> and activity-based fees are dependent on annual turnover:&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Less than or equal to $25 million: $3,000&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 $25 million to $50 million: $5,000&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 $50 million to $100 million: $7,000&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 $100 million to $200 million: $10,000&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Over $200 million: $15,000<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Other provisions from a previous circular dated May 17, 2023, remain unchanged.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br><strong>Circular dated 07 March 2025&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sub: Contribution to Settlement Guarantee Fund (SGF)&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. IFSCA has announced changes to the IFSCA (Market Infrastructure Institutions) Regulations, 2021 (MII Regulations).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Regulation 15 defines the net worth of a Clearing Corporation as the total value of its liquid assets, as determined by the Authority. Liquid assets include cash, bank balances, fixed deposits, Government Securities, and other specified instruments.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. Regulation 31 states that the SGF of a Clearing Corporation can receive contributions from the Clearing Corporation, Stock Exchange, and Clearing Members.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4. It is clarified that a Clearing Corporation&#8217;s contribution to the SGF counts as part of its net worth, and the interest on this cash contribution will be shared among contributors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Circular dated March 10, 2025, Cyber Security Guidelines for Regulated Entities in IFSCs&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Introduction&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The International Financial Services Centres Authority (IFSCA) has issued guidelines on cyber security and cyber resilience to enhance the protection of financial entities in International Financial Services Centres (IFSCs). These guidelines address the increasing complexity of cyber threats facing these organizations, emphasizing the importance of robust cyber security measures.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Key Points&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. Purpose of Guidelines&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 These guidelines aim to establish IFSCA&#8217;s expectations from regulated entities (REs) regarding cyber security.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Regulated Entities (REs) include any entity licensed or recognized by IFSCA.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. Implementation Principles&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 The guidelines should be implemented based on proportionality, considering:&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 The scale and complexity of operations.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 The nature of activities conducted.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Interconnectedness within the financial ecosystem.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Corresponding cyber risks.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. Governance&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Requisite governance mechanisms must be in place, with clear roles and responsibilities.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 An &#8220;Oversight Body&#8221; should include the governing board and senior management personnel.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 A Chief Information Security Officer (CISO) or Designated Officer must be appointed to oversee cyber security.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4. Cyber Security and Resilience Framework&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Regulated Entities (REs) need to develop a framework to ensure the confidentiality, integrity, and availability of IT assets.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 The framework should include risk identification, protection strategies, access controls, physical security, vulnerability assessments, recovery plans, incident management, and audit trails.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5. Third Party Risk Management&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 A collaborative approach with third-party vendors is necessary to ensure data security and compliance.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Regular reviews of third-party services are mandated, especially for those critical to operations.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6. Communication &amp; Awareness&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Regular training on cyber security topics must be provided to employees.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Effective channels for reporting suspicious activities and incidents should be established.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7. Audit Processes&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Periodic audits are required to ensure the effectiveness of the cyber security measures.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Audits should be conducted by certified independent auditors, and the findings reported to IFSCA within specific timelines.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8. Exemptions&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Certain Regulated Entities (REs), such as small firms and foreign entities, may be exempt from the guidelines under specific conditions, including adherence to their parent entity&#8217;s cyber security policies.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Conclusion&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These cyber security guidelines will be effective from April 1, 2025, and aim to safeguard the financial entities operating within the IFSC framework. Compliance will play a crucial role in maintaining credibility and trust in the financial services provided. For more detailed information, the complete circular is available on IFSCA&#8217;s website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>PRESS RELEASE: March 24, 2025, IFSCA Forms Standing Committee on Insurance to Enhance GIFT-IFSC&#8217;s Global Role&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The International Financial Services Centres Authority (IFSCA) has established a Standing Committee on Insurance (SCI) to improve the insurance and reinsurance sector at GIFT &#8211; IFSC. This move is part of IFSCA\u2019s goal to make GIFT &#8211; IFSC a leading global insurance hub with a robust regulatory framework that simplifies business operations.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The SCI will offer strategic advice on regulations, stakeholder relations, public consultations, and industry practices.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The committee&#8217;s key responsibilities include:&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Comparing IFSCA regulations with other international finance centers and suggesting regulatory improvements.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Analyzing the ease and cost of doing business at IFSC and making recommendations.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Engaging with stakeholders, especially NRIs\/PIOs, and conducting educational initiatives.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Reviewing insurance product demand and suggesting new product developments.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Attracting investments from global insurance pools into IFSC.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Providing feedback on IFSCA\u2019s public consultations.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The 23rd meeting of the IFSCA Authority took place on March 26, 2025. During this meeting, several key regulatory changes were approved, primarily focusing on capital market intermediaries, Know Your Customer (KYC) registration agencies, and fund management.&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Key Points:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. IFSCA (Capital Market Intermediaries) Regulations, 2025:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 The new regulations will replace the existing IFSCA regulations from 2021.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Key changes include:&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Introduction of a new category called &#8216;Research Entity&#8217; and removal of &#8216;Account Aggregator. &#8216;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Incorporation of regulatory frameworks for &#8216;Distributors&#8217; and &#8216;ERDPP&#8217; into the regulations.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Specification of qualifications and experience needed for Principal Officers and Compliance Officers.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Clarification that multiple roles can have common officers initially, pending future review.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 No changes to current policy on Global Access for entities in IFSC until further discussion.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Revised net worth requirements, with specific amounts for Credit Rating Agencies, Investment Advisers, and Investment Bankers.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Requirement for intermediaries to submit annual compliance audits by September 30 each year.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. IFSCA (KYC Registration Agency) Regulations, 2025:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 New regulations were approved for KYC Registration Agencies (KRAs) in IFSC.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Regulations detail eligibility requirements, registration criteria including net worth, and responsibilities of KRAs.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 All regulated entities are required to upload KYC records to the KRA, with possible exemptions.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. Transition to IFSCA (Fund Management) Regulations, 2025:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 The Authority approved a one-time extension for the validity of expired private placement memoranda under specific conditions.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Conclusion:&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The new regulations set forth by the IFSCA aim to enhance the regulatory framework in the IFSC, promoting investor protection, market fairness, and reducing systemic risks. The updated policies are designed to streamline processes for capital market intermediaries and enhance client onboarding through effective KYC practices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduction:&nbsp; The Financial Action Task Force (FATF) issued a public statement on February 21, 2025, regarding jurisdictions with strategic deficiencies in Anti-Money Laundering (AML) and Combating Financing of Terrorism (CFT).&nbsp; Key Points:&nbsp; \u2022 FATF called attention to previous statements from February 2020 and October 2022.&nbsp; \u2022 Jurisdictions identified with deficiencies that have an action plan include Algeria, Angola, Bulgaria, Burkina Faso, Cameroon, C\u00f4te d&#8217;Ivoire, Croatia, Democratic Republic of the Congo, Haiti, Kenya, Lao PDR, Lebanon, Mali, Monaco, Mozambique, Namibia, Nepal, Nigeria, South Africa, South Sudan, Syria, Tanzania, Venezuela, Vietnam, &amp; Yemen.&nbsp; \u2022 The Philippines has been removed from the list of jurisdictions under increased monitoring.&nbsp; \u2022 Regulated entities are still allowed to engage in legitimate transactions with these jurisdictions.&nbsp; On March 07, 2025 IFSCA issued a circular for Consultation Paper on Oilfield Equipment Leasing. This consultation paper aims to gather public views on a proposal from the Authority to classify &#8220;oilfield equipment&#8221; for leasing under specific government notifications. This classification would allow for its leasing to be recognized as a financial product.&nbsp; Key Points:&nbsp; 1. The Authority seeks comments on specifying &#8220;oilfield equipment&#8221; under the powers given by the Indian government\u2019s notification from December 14, 2021.&nbsp; 2. Once specified, the operating lease of oilfield equipment will be categorized as a financial product according to the IFSCA Act, 2019.&nbsp; 3. The proposed definition for &#8220;oilfield equipment&#8221; will mirror the list from the GST notification regarding supplies for exploration and production.&nbsp; 4. The leasing frameworks may include ownership or lease-in-lease-out options by financial institutions in the IFSC.&nbsp; 5. Oilfield equipment encompasses tools and machinery used for exploration, extraction, and production of oil and gas.&nbsp; 6. The global oilfield equipment leasing market represents 6-7% of total equipment leasing, growing steadily, with significant advancements in many countries, including those in Asia-Pacific.&nbsp; 7. India heavily relies on imported oilfield equipment. Recent policies aim to boost domestic exploration to reduce this dependency, forecasting increased demand for such equipment.&nbsp; 8. Leasing oilfield equipment could prove to be a cost-effective strategy for Indian companies, with interest expressed from stakeholders regarding leasing frameworks.&nbsp; Conclusion:&nbsp; The proposal aims to create an operational framework for leasing oilfield equipment, thus supporting increased oil exploration in India and positioning GIFT IFSC as a regional leasing hub. Public input is welcomed to assess the effectiveness and practicality of this proposal. On March 07 2025, IFSCA released circular to notify updated Fee Structure for ITFS Operators\/Applicants in IFSC&nbsp; Introduction&nbsp; This circular outlines the fee structure for International Trade Finance Service (ITFS) operators and applicants intending to set up an ITFS in the International Financial Services Centre (IFSC).&nbsp; Key Points&nbsp; \u2022 Effective April 01, 2025, a specific fee structure will apply.&nbsp; \u2022 Application fee: $1,000&nbsp; \u2022 Registration fee: $10,000&nbsp; \u2022 Processing fee: 20% of registration fee (relaxation waiver of guidelines &#8211; $500) \u2022 Recurring fee and activity-based fees are dependent on annual turnover:&nbsp; \u2022 Less than or equal to $25 million: $3,000&nbsp; \u2022 $25 million to $50 million: $5,000&nbsp; \u2022 $50 million to $100 million: $7,000&nbsp; \u2022 $100 million to $200 million: $10,000&nbsp; \u2022 Over $200 million: $15,000 \u2022 Other provisions from a previous circular dated May 17, 2023, remain unchanged.&nbsp; Circular dated 07 March 2025&nbsp; Sub: Contribution to Settlement Guarantee Fund (SGF)&nbsp; 1. IFSCA has announced changes to the IFSCA (Market Infrastructure Institutions) Regulations, 2021 (MII Regulations).&nbsp; 2. Regulation 15 defines the net worth of a Clearing Corporation as the total value of its liquid assets, as determined by the Authority. Liquid assets include cash, bank balances, fixed deposits, Government Securities, and other specified instruments.&nbsp; 3. Regulation 31 states that the SGF of a Clearing Corporation can receive contributions from the Clearing Corporation, Stock Exchange, and Clearing Members.&nbsp; 4. It is clarified that a Clearing Corporation&#8217;s contribution to the SGF counts as part of its net worth, and the interest on this cash contribution will be shared among contributors. Circular dated March 10, 2025, Cyber Security Guidelines for Regulated Entities in IFSCs&nbsp; Introduction&nbsp; The International Financial Services Centres Authority (IFSCA) has issued guidelines on cyber security and cyber resilience to enhance the protection of financial entities in International Financial Services Centres (IFSCs). These guidelines address the increasing complexity of cyber threats facing these organizations, emphasizing the importance of robust cyber security measures.&nbsp; Key Points&nbsp; 1. Purpose of Guidelines&nbsp; \u2022 These guidelines aim to establish IFSCA&#8217;s expectations from regulated entities (REs) regarding cyber security.&nbsp; \u2022 Regulated Entities (REs) include any entity licensed or recognized by IFSCA.&nbsp; 2. Implementation Principles&nbsp; \u2022 The guidelines should be implemented based on proportionality, considering:&nbsp; \u2022 The scale and complexity of operations.&nbsp; \u2022 The nature of activities conducted.&nbsp; \u2022 Interconnectedness within the financial ecosystem.&nbsp; \u2022 Corresponding cyber risks.&nbsp; 3. Governance&nbsp; \u2022 Requisite governance mechanisms must be in place, with clear roles and responsibilities.&nbsp; \u2022 An &#8220;Oversight Body&#8221; should include the governing board and senior management personnel.&nbsp; \u2022 A Chief Information Security Officer (CISO) or Designated Officer must be appointed to oversee cyber security.&nbsp; 4. Cyber Security and Resilience Framework&nbsp; \u2022 Regulated Entities (REs) need to develop a framework to ensure the confidentiality, integrity, and availability of IT assets.&nbsp; \u2022 The framework should include risk identification, protection strategies, access controls, physical security, vulnerability assessments, recovery plans, incident management, and audit trails.&nbsp; 5. Third Party Risk Management&nbsp; \u2022 A collaborative approach with third-party vendors is necessary to ensure data security and compliance.&nbsp; \u2022 Regular reviews of third-party services are mandated, especially for those critical to operations.&nbsp; 6. Communication &amp; Awareness&nbsp; \u2022 Regular training on cyber security topics must be provided to employees.&nbsp; \u2022 Effective channels for reporting suspicious activities and incidents should be established.&nbsp; 7. Audit Processes&nbsp; \u2022 Periodic audits are required to ensure the effectiveness of the cyber security measures.&nbsp; \u2022 Audits should be conducted by certified independent auditors, and the findings reported to IFSCA within specific timelines.&nbsp; 8. Exemptions&nbsp; \u2022 Certain Regulated Entities (REs), such as small firms and foreign entities, may be exempt from the guidelines under specific conditions, including adherence to their parent entity&#8217;s cyber security policies.&nbsp; Conclusion&nbsp; These<\/p>\n","protected":false},"author":1,"featured_media":440,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-436","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"_links":{"self":[{"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/posts\/436","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/comments?post=436"}],"version-history":[{"count":2,"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/posts\/436\/revisions"}],"predecessor-version":[{"id":438,"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/posts\/436\/revisions\/438"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/media\/440"}],"wp:attachment":[{"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/media?parent=436"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/categories?post=436"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rnmcapital.in\/rnm-capital-trust\/wp-json\/wp\/v2\/tags?post=436"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}