India on IntelliXBOM

SEBI's CSCRF Names SBOMs Here's What GV.SC.S5 Actually Demands (and Where It Still Leaves Gaps)

Mon, 13 Apr 2026 18:00:00 +0530

When SEBI published its Cybersecurity and Cyber Resilience Framework (CSCRF) in August 2024 (Circular SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113, 20 August 2024), many teams scanned the document for one question: does the capital markets regulator treat software supply chain risk as a first class problem?

The answer is yes, explicitly. Under Governance → Supply Chain Risk Management, Standard GV.SC.S5 mandates Software Bills of Materials (SBOMs) for Regulated Entities (REs), with SolarWinds and Apache Log4j cited as motivating context. That level of specificity is unusual and welcome for a financial sector framework.

Don't Trust the SBOM Your Vendor Gave You

Thu, 09 Apr 2026 12:00:00 +0530

Regulators across the world are finally getting serious about the software supply chain. India’s CERT-In SBOM Technical Guidelines (v2.0, July 2025) go beyond just SBOMs they extend to a broader BOM ecosystem, including CBOM, QBOM, AIBOM, and HBOM. This makes the requirement not just about software components, but about understanding the full composition of modern systems.

Globally, the direction is the same whether it’s the US Executive Order 14028, the EU Cyber Resilience Act, RBI Advisory 11/2024, or MeitY’s 2025 guidelines.

Your Vendor NDA Won't Stop a Supply Chain Attack

Mon, 06 Apr 2026 00:00:00 +0000

IRDAI’s New Rules Won’t Save You.

What the 2026 IRDAI Guidelines on Information and Cyber Security for Regulated Entities get right, what they miss, and the one capability every regulated insurer needs to deploy now.

The Insurance Regulatory and Development Authority of India (IRDAI) has significantly raised the bar with its amended Cybersecurity Guidelines 2023 (Annexure A). For every insurer and insurance intermediary operating in India, these amendments are not optional fine print they are a direct signal that cybersecurity governance must now match the sophistication of today’s threat landscape.