{"id":121768,"date":"2026-08-31T11:12:08","date_gmt":"2026-08-31T05:42:08","guid":{"rendered":"https:\/\/vajiramandravi.com\/current-affairs\/?p=121768"},"modified":"2026-08-31T11:12:08","modified_gmt":"2026-08-31T05:42:08","slug":"ai-and-financial-cybersecurity-how-rbi-and-sebi-are-tightening-rules","status":"publish","type":"post","link":"https:\/\/vajiramandravi.com\/current-affairs\/ai-and-financial-cybersecurity-how-rbi-and-sebi-are-tightening-rules\/","title":{"rendered":"AI and Financial Cybersecurity: How RBI and SEBI Are Tightening Rules"},"content":{"rendered":"<h2><b>AI and Financial Cybersecurity Latest News<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">As Artificial Intelligence increasingly enables sophisticated fraud, deepfakes and attacks on critical financial infrastructure, India&#8217;s key financial regulators \u2014 the RBI and SEBI \u2014 are overhauling cybersecurity frameworks to safeguard the financial ecosystem.<\/span><\/li>\n<\/ul>\n<h2><b>The Rising Threat Landscape<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AI is transforming the nature of financial fraud. <\/span><b>Deepfake voices<\/b><span style=\"font-weight: 400;\"> are being used to bypass KYC norms, while more complex scams are infiltrating critical financial institutions.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Several banks have already faced cybersecurity breaches in 2026.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unlike traditional threats built around identifiable vulnerabilities and periodic assessments, AI dramatically increases the speed, scale and sophistication of attacks \u2014 from automated vulnerability discovery to autonomous cyberattacks.<\/span><\/li>\n<\/ul>\n<h2><b>SEBI&#8217;s IT Resilience Index (ITRI)<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SEBI has introduced an IT Resilience Index for Market Infrastructure Institutions (MIIs) \u2014 entities like clearing corporations and exchanges that enable trading.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Key features:<\/span>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Quantifies cyber readiness across <\/span><b>nine parameters.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>Availability and security<\/b><span style=\"font-weight: 400;\">: 20% weightage each.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>Integrity, governance, reliability and monitoring, modularity and flexibility, business continuity<\/b><span style=\"font-weight: 400;\">: 10% weightage each.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>Scalability<\/b><span style=\"font-weight: 400;\"> and <\/span><b>miscellaneous (&#8220;others&#8221;)<\/b><span style=\"font-weight: 400;\">: 5% weightage each.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">MIIs must compute ITRI <\/span><b>half-yearly<\/b><span style=\"font-weight: 400;\">, submit comparative analysis within 60 days, and outline corrective action.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Framework takes effect from <\/span><b>early 2027.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Includes an &#8220;early warning system&#8221; for continuous risk monitoring.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2><b>Standardised Incident Reporting: The FIRE Format<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SEBI has aligned its cyber incident reporting portal with a standardised &#8220;Format for Incident Reporting Exchange&#8221; (FIRE).\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">This enables staged reporting \u2014 from initial disclosure through intermediate updates to final closure \u2014 while accommodating incomplete information at the time of first reporting.<\/span><\/li>\n<\/ul>\n<h2><b>RBI&#8217;s Cybersecurity Framework<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The RBI released a comprehensive cybersecurity framework for banks and financial institutions, mandating:<\/span>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Board-level ownership of cyber risks.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Dedicated committees to monitor IT risks.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">A strict six-hour window for reporting cyber incidents.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">A revised fraud compensation mechanism (June 2026) expanding victim eligibility and covering newer digital scams.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2><b>The &#8220;Kill Switch&#8221; Mechanism<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Both regulators are exploring a &#8220;kill switch&#8221;:<\/span>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>RBI<\/b><span style=\"font-weight: 400;\">: Would allow users to halt all financial transactions during fraud<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>SEBI<\/b><span style=\"font-weight: 400;\">: Evaluating a similar mechanism as part of upcoming AI guidelines<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2><b>SEBI&#8217;s Forthcoming AI Guidelines<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SEBI plans to &#8220;shortly&#8221; issue guidelines for the responsible use of AI and machine learning in markets.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It already uses AI to flag suspicious trading patterns and has constituted a dedicated team to extend AI-based surveillance to corporate investigations, including scrutiny of quarterly filings.<\/span><\/li>\n<\/ul>\n<h2><b>Expert Recommendations<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Legal experts suggest regulators should focus on:<\/span>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">AI-specific threat modelling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Continuous (not periodic) testing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Third-party and cloud concentration risks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Model and data integrity<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Deepfake-enabled fraud and supply-chain vulnerabilities<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Clear human accountability where AI influences critical decisions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>Technology-neutral accountability<\/b><span style=\"font-weight: 400;\"> backed by technology-specific safeguards, rather than an overly prescriptive code<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2><b>Conclusion<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AI has fundamentally altered the financial fraud threat matrix, prompting RBI and SEBI to modernise cybersecurity frameworks through tools like ITRI, FIRE reporting and kill-switch mechanisms.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Sustained regulatory agility, technology-neutral accountability and AI-enabled defensive systems remain critical to securing India&#8217;s financial infrastructure.<\/span><\/li>\n<\/ul>\n<p><b>Source:<\/b> <strong><a href=\"https:\/\/indianexpress.com\/article\/explained\/explained-economics\/rbi-sebi-cybersecurity-rules-ai-financial-fraud-explained-10850150\/\" target=\"_blank\" rel=\"nofollow noopener\">IE<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AI and Financial Cybersecurity are driving RBI and SEBI reforms through IT resilience, incident reporting, kill switches and stronger safeguards against digital fraud.<\/p>\n","protected":false},"author":18,"featured_media":121783,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[18],"tags":[9883,60,22,59],"class_list":["post-121768","post","type-post","status-publish","format-standard","has-post-thumbnail","category-upsc-mains-current-affairs","tag-ai-and-financial-cybersecurity","tag-mains-articles","tag-upsc-current-affairs","tag-upsc-mains-current-affairs","no-featured-image-padding"],"acf":[],"_links":{"self":[{"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/posts\/121768","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/comments?post=121768"}],"version-history":[{"count":4,"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/posts\/121768\/revisions"}],"predecessor-version":[{"id":121790,"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/posts\/121768\/revisions\/121790"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/media\/121783"}],"wp:attachment":[{"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/media?parent=121768"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/categories?post=121768"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vajiramandravi.com\/current-affairs\/wp-json\/wp\/v2\/tags?post=121768"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}