Implementation of Information and Cyber Security Guidelines – Reg

In continuation of Circular extending applicability of “Guidelines on Information and Cyber Security” to insurance intermediaries , dated September 2, 2022, the IRDAI vide Circular Ref. no: IRDAI/GA&HR/GDL/MISC/211/10/2022, dated October 13, 2022 has issued directions to insurance intermediaries for implementation of Cyber Security Guidelines as per the below given timelines and file the Audit report to the Authority on or before the March 31, 2023.

Sr. no

Particular

Timelines for implementation

1

Appointment of Chief Information Security Officer (CISO) responsible for enforcing the Cyber Security Policies.

31st Dec, 2022

2

Preparation of GAP Analysis Report as per Checklist

31st Dec, 2022

3

Formulation of Cyber Crisis Management Plan

15th Jan, 2023

4

Preparing Information and Cyber Security Policy, to be approved by Board of the Intermediary.

31st Jan, 2023

5

Completion of Cyber Security Assurance Audit

28th Feb, 2023

6

Cyber Security Assurance Program (to close Gaps) as per Cyber Security Assurance Audit

31st Mar, 2023

Source category: IRDAI

Attachments

• /2022/91_2022-10-11_Implementation_of_Information_and_Cyber_Security_Guidelines_–_Reg_(1).pdf
• /2022/91_2022-10-11_Implementation_of_Information_and_Cyber_Security_Guidelines_–_Reg_(2).pdf
• /2022/91_2022-10-11_Implementation_of_Information_and_Cyber_Security_Guidelines_–_Reg_(3).pdf