Our role: The final statutory audit report for this requirement must be issued by a CERT-In empanelled auditor. Rakvora prepares you for it — pre-audit assessment, VAPT, remediation support and evidence — so the statutory audit closes quickly and cleanly.
SEBI's Cybersecurity and Cyber Resilience Framework (CSCRF) sets cyber security requirements for regulated entities including stockbrokers, depository participants, mutual funds and market infrastructure institutions, with periodic audits.
We assess your controls against the CSCRF requirements for your category, test your systems and help you close gaps ahead of the statutory audit.
Objectives
- Assess governance, identification, protection, detection, response and recovery controls
- Test trading, client-facing and internal systems
- Review SOC capability, logging and incident response
- Prepare evidence for the CSCRF audit
Methodology
01
Scoping
- Confirm the applicable regulation, circulars and in-scope systems
- Agree timelines against your regulatory deadline
02
Pre-audit assessment
- Control-by-control review against the regulatory checklist
- Vulnerability assessment and penetration testing of in-scope systems
03
Remediation
- Prioritised fix plan with owners and dates
- Hands-on support closing gaps and updating policies
04
Audit readiness
- Evidence pack organised to the auditor's checklist
- Support during the statutory audit and closure of observations
Deliverables
Pre-audit gap assessment report
VAPT report with retest
Remediation tracker
Evidence pack for the statutory auditor