Quarterly Cyber Incident reporting under Cyber Security & Cyber Resilience Framework for Regulated Entities (REs)

Document text

National Stock Exchange of India Limited Circular DEPARTMENT: INSPECTION Download Ref No: NSE/INSP/74980 Date: July 01, 2026 Circular Ref. No: 33/2026 To All Trading Members, Sub: Quarterly Cyber Incident reporting under Cyber Security & Cyber Resilience Framework for Regulated Entities (REs) This is with reference to SEBI circular no. SEBI/HO/ ITD-1/ITD_CSC_EXT/P/CIR/2024/113 dated August 20, 2024 and Exchange circular no. NSE/INSP/63502 dated August 21, 2024 on Cyber Security & Cyber Resilience framework for SEBI Regulated Entities (REs). In view of the above, REs/trading members are required to report Cyber Incident(s) for the quarter ending June 30, 2026, through member portal on or before July 15, 2026. The path for online submission of the Quarterly Cyber Incident Report is given below. ENIT > ENIT-NEW-TRADE > Trade > Incident Report > Quarterly Report Submission. In addition to the above for reporting of Immediate Cyber Incident, REs/trading members are requested to refer to Exchange circular no. NSE/INSP/66040 dated January 08, 2025, on Standard Operating Procedure (SOP) for handling Cyber Security Incidents. The guidelines for submitting the Quarterly Cyber Incident Report is given in Annexure 1. Trading Members are requested to refer Annexure - 1.2 of Exchange Circular Ref No. NSE/INSP/73792 dated April 17, 2026, on actions for non-compliances observed in periodic submissions by trading members related to the Quarterly Cyber Incident Reporting. The details of financial disincentive(s)/ Penalties/ disciplinary action(s) have been provided in Annexure 2. All Trading Members are advised to take note of the above and comply. In case of any query or support for cyber incident reporting, please reach us on email address: DL-SYSCYB@nse.co.in National Stock Exchange of India Limited Page 2 of 8 For and on behalf of National Stock Exchange of India Limited Prashant Aier Chief Manager – Inspection In case of any clarifications, Members may contact our below offices: Regional Office CONTACT NO. E MAIL ID Ahmedabad (ARO) 079-65278024/55 inspectionahm@nse.co.in Chennai (CRO) 044- 66309915/17 inspection_cro@nse.co.in Delhi (DRO) 011-23459146/127/144/147 delhi_inspection@nse.co.in Kolkata (KRO) 033- 40400404/06 inspection_kolkata@nse.co.in Mumbai (WRO) 022-61928200 compliance_wro@nse.co.in Central Help Desk compliance_assistance@nse.co.in National Stock Exchange of India Limited Page 3 of 8 Annexure 1 The guidelines for submitting the Quarterly Cyber Incident Report 1. Admin needs to assign “ENIT New trade” role to designated officer in the Member Portal. 2. Sub User id having above mentioned ‘ENIT NEW TRADE’ role can see below screen after login. Click on ‘ENIT-NEW-TRADE’ National Stock Exchange of India Limited Page 4 of 8 3. Click on Trade > Incident Report > Quarterly Report Submission. 4. Click on ‘Submit Details’ button 5. Details for first 2 point will auto-populate in system. Enter Designated Officer details in 3rd point. Confirm in point no. 4 whether any breach observed by selecting ‘Yes’ or ‘No’. National Stock Exchange of India Limited Page 5 of 8 6. If ‘No’ is selected in Point no. 4, a new field of ‘Nil Submission’ will auto-populate. Click the ‘Nil Submission’ check Box. 7. In case “No” is selected user will be directed to save the draft and upload the report. In case “Yes” is selected, user can save the details of incident as per below print screen. User can save data on clicking ‘Save as Draft’ and can submit data later. After filling in all required details, click on ‘Generate PDF’ button for submitting the report. National Stock Exchange of India Limited Page 6 of 8 8. On Clicking “Incident Report” a PDF report will get downloaded. Check the PDF report and upload the incident report on clicking ‘Choose File’ button. Please Note: To facilitate ease of submission for Quarterly/Immediate Incident Report the requirement of digital signature shall not be applicable. 9. After uploading PDF file, click on ‘Submit’ button. National Stock Exchange of India Limited Page 7 of 8 User can see the status of the report on the below path: ENIT-NEW-TRADE >Trade > Incident Report > Quarterly View Report National Stock Exchange of India Limited Page 8 of 8 Annexure – 2 Indicative penalty for non-submission / late submission of cyber incident reporting (quarterly submission) within the time specified by the exchange. The following penalty/ disciplinary actions would be initiated against the Trading Member for late/non-submission in this regard: Details of Violation/contravention Action in case of first instance Action in case of repeat instance Delay/Non-submission of Cyber Incident reporting (Quarterly Submission) within the due date 1.Charges Rs. 1,500/- per day for Non QRE & Rs. 3,000/- per day for QRE from the due date till first 7 calendar days or submission of report, whichever is earlier. 2.Charges of Rs. 2,500/- per day for Non QRE & Rs. 5,000/- per day for QRE from 8th calendar day after the due date to 21st calendar day or submission of report, whichever is earlier. 3.In case of non-submission of report till 21st calendar days, new client registration shall be prohibited and notice of 7 calendar days for disablement of trading facility till submission of report, shall be issued. 4.The disablement notice issued to the member will be shared with all the Exchanges for information. 5.In case of non-submission of report by 28th calendar day, Member shall be disabled in all segments till submission of report. 2nd Time & Onwards -Levy of applicable monetary penalty along with an escalation of 50%. In case of non-submission of report till 21st calendar days, new client registration shall be prohibited and notice of 7 calendar days for disablement of trading facility till submission of report, shall be issued. The disablement notice issued to the member will be shared with all the Exchanges for information. In case of non- submission of report by 28th calendar day, Member shall be disabled in all segments till submission of report.