The Insurance Regulatory and Development Authority of India (IRDAI) on April 06, 2026, issued the revised guidelines on information and cybersecurity for regulated entities.
The following has been stated:
In view of the evolving threat landscape, feedback received from the Industry & recommendations of various IRDAI committees, it has issued the revised guidelines in order to enable the insurance industry to further strengthen its defences as well as related governance mechanisms to deal with emerging cyber threats.
A brief summary of the major changes in the guidelines is enclosed as Annexure-A, and the IRDAI information and Cyber Security Guidelines, 2026 are attached as Annexure–B along with the document.
These guidelines set out the minimum standards and governance mechanisms to be adopted by all regulated entities.
Please refer to the document attached below for more details.
[Notification No. IRDAI/GA&HR/CIR/MISC/514/2026]
