IFSCA Amends Cyber Security Guidelines for IFSC REs
- Blog|News|FEMA & Banking|
- 2 Min Read
- By Taxmann
- |
- Last Updated on 12 March, 2026

Circular no. IFSCA-CSD0MSC/1/2026-DCS; Dated: 10.03.2026
The IFSCA has amended its Circular titled “Guidelines on Cyber Security and Cyber Resilience for REs in IFSCs”. Under the revised framework, certain categories of REs, including branches of regulated Indian or foreign entities, entities providing services only to group companies and entities with fewer than 10 employees, are granted a 3-year exemption from the circular’s requirements, subject to specified conditions.
The REs specified in para 21 shall comply with the following conditions during the exempted period:
- The RE shall adopt the Cyber Security and Cyber Resilience framework and IS Policy of its parent entity or the holding company of such parent entity.
- The CISO of the parent entity shall act as the Designated Officer for the RE.
- The parent entity or the holding company of such parent entity of the RE, in India or overseas, must be regulated by a regulator/Government Body in its home jurisdiction.
- The Designated Officer of the RE shall certify that all the necessary systems/processes, in line with these Guidelines
- The RE shall submit the annual cybersecurity audit report to IFSCA.
The following categories of REs are also exempted for a period of three (3) years.
- Foreign university set up in the IFSC
- The RE, which has been established as a newly incorporated standalone entity
- Credit Rating Agency
Provided that the Designated Officer of such RE shall, during the exempted period, certify that the RE has implemented adequate cybersecurity measures proportionate to its risk exposure, and shall submit the same to the respective supervision Department/Division of IFSCA within ninety (90) days of the end of each financial year
Click Here To Read The Full Circular
Disclaimer: The content/information published on the website is only for general information of the user and shall not be construed as legal advice. While the Taxmann has exercised reasonable efforts to ensure the veracity of information/content published, Taxmann shall be under no liability in any manner whatsoever for incorrect information, if any.

Taxmann Publications has a dedicated in-house Research & Editorial Team. This team consists of a team of Chartered Accountants, Company Secretaries, and Lawyers. This team works under the guidance and supervision of editor-in-chief Mr Rakesh Bhargava.
The Research and Editorial Team is responsible for developing reliable and accurate content for the readers. The team follows the six-sigma approach to achieve the benchmark of zero error in its publications and research platforms. The team ensures that the following publication guidelines are thoroughly followed while developing the content:
- The statutory material is obtained only from the authorized and reliable sources
- All the latest developments in the judicial and legislative fields are covered
- Prepare the analytical write-ups on current, controversial, and important issues to help the readers to understand the concept and its implications
- Every content published by Taxmann is complete, accurate and lucid
- All evidence-based statements are supported with proper reference to Section, Circular No., Notification No. or citations
- The golden rules of grammar, style and consistency are thoroughly followed
- Font and size that’s easy to read and remain consistent across all imprint and digital publications are applied

CA | CS | CMA