Sebi proposes framework for regulated entities to address risks associated with cloud-based solutions Capital markets regulator Sebi has proposed a cloud framework for its regulated entities, highlighting key risks and control measures such entities need to consider before adopting cloud-based solutions. The proposed framework outlines the regulatory and legal expectations from Sebi-regulated entities (REs) if they adopt cloud computing solutions. “While cloud solutions offer multiple advantages — ready to scale, ease of deployment, no overhead of maintaining physical infrastructure among others — an RE should also be aware of the new cyber security risks and challenges which cloud solutions introduce,” the regulator said in its consultation paper. Accordingly, a cloud framework has been drafted to address the risks effectively and ensure legal and regulatory compliance. The Securities and Exchange Board of India (Sebi) has sought comments on the proposal till November 14. Also Read: Bombay Dyeing in SAT against Sebi Under the proposal, Sebi said there are no limitations on using any cloud deployment model. An RE may adopt cloud computing depending on their business and technology risk assessment. Although IT services can be outsourced to a cloud- based solution, an RE would be solely accountable for all aspects related to cloud services including confidentiality, security of its data and logs, and ensuring compliance with rules. Accordingly, the RE would be held accountable for any violation of the same, the consultation paper noted. “The cloud services should be taken only from the MeitY (Ministry of Electronics and Information Technology) empanelled cloud service provider’s (CSP’s) data centres,” Sebi said. There should be a demarcation of responsibilities with respect to all activities — technical, managerial, governance related — of cloud services between the RE and CSP. The same should be a part of the agreement between the RE and the CSP. As part of system audit conducted by the RE, the auditor should verify whether there is a clear demarcation of roles and responsibilities for each function between the RE and the CSP. “Data shall be encrypted at any lifecycle stage, source or location to ensure confidentiality, privacy and integrity. RE shall retain complete ownership of its data and associated data, encryption keys, logs etc. residing in the cloud,” it added. The proposed cloud framework has suggested nine high-level principles — Governance, Risk and Compliance (GRC); data localization; data ownership and process visibility; access, risk assessment and due-diligence on CSPs; security controls; legal and regulatory obligations; Business Continuity Planning (BCP), Disaster Recovery & Cyber Resilience ; and vendor lock-in. The consultation paper is based on a lengthy and exhaustive study, survey, and consultations with market participants, brokers, regulators, cloud associations, cloud service providers, government agencies, and Sebi’s Steering Committee.
However, he believes that the impact on the Indian market is going to be temporary since there could be some short-term impact on flows into Indian equity markets. But since the Indian economy is on a strong wicket and will continue to remain resilient.
“Improved fiscal situation, controlled current deficit, stable interest scenario combined with good corporate earnings should lead to limited impact on the Indian bond market and equity market too,” he added.
The midcap and smallcap indices took a bigger knock with the BSE MidCap fell 2.51%, while BSE SmallCap index dived 4.18%. According to Amnish Aggarwal, head, research, Prabhudas Lilladher, the valuations were already high and some correction was expected. “If the situation sustains as it is then further correction can’t be ruled out,” Aggarwal said.
Telecommunication and industrials indices were the top laggards with BSE Telecommunication declining 3.82%, followed by BSE Industrials falling 3.26%. JSW Steel (-2.99%), Tata Steel (-2.52%) and Tata Consultancy Services (-2.44%) were the top losers of Sensex.
Surprisingly, both foreign portfolio investors and domestic institutional investors were net buyers today. While, FPIs net bought shares worth Rs 252.25 crore, DIIs have purchased shares worth Rs 1,111.84 crore, as per provisional data from exchanges.
Calling this a “normal phenomena” Pankaj Pandey, head, research, ICICI Direct said, “I will not really give too much weight to a single day buying figure. Amid concerns of elevated interest rate and geopolitical tensions, in a typical market cycle, 8-10% correction is possible at any point in time.”
The brunt of geopolitical conflict, elevated interest rates and rising crude oil prices was also felt by other Asian- Pacific markets. Jakarta Composite Index lost 1.57% followed by Shanghai Composite Index and PSEi, which fell 1.47% and 0.89%, respectively. Nikkei and KOSPI declined 0.83% and 0.76%.