The International Financial Services Centres Authority (IFSCA) on April 20, 2026, issued a notification regarding comprehensive Cybersecurity Guidelines for Market Infrastructure Institutions in GIFT IFSC.
The following has been stated: -
•The International Financial Services Centres Authority (IFSCA) has issued comprehensive cybersecurity guidelines for Market Infrastructure Institutions (MIIs) in GIFT IFSC, establishing a detailed and prescriptive framework.
•These guidelines build on earlier norms and introduce enhanced obligations for critical entities like stock exchanges and depositories, structured around seven key cybersecurity functions.
•They mandate strong governance measures, including board-approved policies and appointment of a Chief Information Security Officer, along with advanced systems like 24x7 security operations centres and post-quantum cryptography preparedness.
•Strict incident reporting timelines and robust third-party risk management frameworks have also been prescribed.
•The guidelines align with national cybersecurity laws and standards, came into effect on April 01, 2026, and require phased compliance within specified timelines.
The detailed notification is given in the document below.
