Looking to comply
with SEBI-mandated
Cloud Adoption Framework?

Learn more about the latest Framework and Guidelines for
Cloud Services Adoption by Financial Entities in India

Let's Talk Get the Key Insights

The What, Why, and the Hows of the
SEBI Framework for Cloud Adoption.

Thales offers integrated solutions with a focus on
Security Control and Concentration Risk Management Principles.

thalesgroup.com

Understanding SEBI’s Framework for Cloud Services Adoption by Financial Entities in India

Read Blog
Overview:

SEBI’s Principle-based Framework

Cloud Services Adoption by Financial Entities in India

The principle-based framework lays out risks unique to public cloud services to enable the Regulated Entities (REs) to develop their risk management strategy. It covers nine key aspects with a focus on the following areas:

discuss
Develop a risk management strategy for public cloud services.
Implement robust controls for cyber security, data protection, and cryptography.
Expand cyber security operations to cover public cloud workloads.
Manage risks related to resilience, outsourcing, vendor lock-in, and concentration.
Ensure staff have skills to manage public cloud workloads and risk.
discuss

Applicability

The framework applies immediately to all new or proposed cloud onboarding assignments/projects of REs as of March 6, 2023. Existing REs must comply within 12 months.

Source: SEBI Circular

Who needs to comply

graph
Stock Exchanges, Clearing Corporations and Depositories
hand
Stock Brokers through Exchanges 
connection
Depository Participants through Depositories
group
Mutual Funds and AMCs
bank
Trustee Companies and Boards of Trustees of Mutual Funds
group security
Association of Mutual Funds in India (AMFI)
user security
KYC Registration Agencies
register
Qualified Registrars to an Issue / Share Transfer Agents
“We are proud to be an early adopter of the SEBI Framework for the adoption of cloud services by REs. It enables us to bring more security and confidence to our customers.”
Shanker Ramrakhiani, CISO of IIFL Group
Find out how we addressed IIFL Group's security challenges
and met SEBI compliance
shanker ramrakhiani

Ensure Compliance with our Integrated
Cloud Solutions

office

Let’s understand how our
solutions can help you comply
with:

Thales offers multiple solutions for data at rest that can coexist with native encryption provided by Cloud Service Provider (CSP):

Thales High Speed Network Encryption (HSE) solutions secure data in motion as it moves across the network:

  • Data Centers and Headquarters
  • Branch and Satellite Offices
  • Backup and Disaster Recovery Sites
  • On Premises and In The Cloud
CipherTrust Transparent Encryption encrypts files while leaving their metadata in the clear. In this way, CSP can perform their system administration tasks without gaining privileged access to the sensitive data residing on the systems they manage.

CipherTrust Cloud Key Manager supports Bring Your Own Key (BYOK) and Hold Your Own Key (HYOK) use cases across multiple cloud infrastructures and SaaS applications in a single interface. It provides:

  • Auditing of key
  • Strong key generation
  • End-to-end key lifecycle management 
  • Automatic key rotation, recovery, and key revocation feature

CipherTrust Transparent Encryption provides transparent encryption and access control for data residing in Amazon S3, Azure Files, and more. It also offers advanced multi-cloud Bring Your Own Encryption (BYOE) solutions to:

  • Avoid cloud vendor encryption lock-in
  • Ensure data mobility across multiple cloud vendors
  • Efficiently secure data with centralized, independent encryption key management

Thales Luna Hardware Security Modules (HSM) allow organizations to have dedicated Hardware. It allows more control and ownership over the crypto keys rather than with the Cloud Service Provider (CSP).

Our Thales Luna HSM product family represents the highest-performing, most secure, and easiest-to-integrate HSM solution available on the market today.

CipherTrust Cloud Key Manager combines support for cloud provider BYOK service, and cloud key management that provides cloud consumers with strong controls over the encryption key life cycles for data encrypted by a cloud service provider.

Thales CipherTrust Transparent Encryption (CTE) and CipherTrust Tokenization offer advanced multi-cloud Bring Your Own Encryption (BYOE) solutions to:

  • Avoid cloud vendor encryption lock-in
  • Ensure data mobility across multiple cloud vendors
  • Efficiently secure data with centralized, independent encryption key management

Get in Touch

We Are Here to Help You

Let's Collaborate!

Drop your business email, and we will contact you without delay.

Need more information ?

dsp

CipherTrust Data Security Platform (DSP)

Discover, protect and control sensitive data anywhere with next-generation unified data protection.

dsp

Private Indian Bank Case Study

Thales Helps One of India’s Largest Private Banks Streamline Key Management Across Multiple Cloud Services.

dsp

CipherTrust Platform Community Edition

The CipherTrust Platform Community Edition provides key management and encryption tools to protect PII and sensitive data immediately, with no expiration date.