SEBI imposes a Rs 1 crore penalty on CDSL for 2022 malware attack

The Securities and Exchange Board of India (SEBI) has imposed a total penalty of Rs 1 crore on Central Depository Services (India) Limited (CDSL ) for multiple cybersecurity and regulatory lapses that culminated in the malware attack on its systems in November 2022 . In an order issued on July 20, SEBI held that CDSL failed to classify a critical internet-facing server as a critical asset , implement mandatory cybersecurity controls, and adequately monitor its systems, a