SEBI penalises CDSL for cybersecurity lapses behind 2022 malware attack, imposes Rs 1 crore penalty

SEBI penalised CDSL for cybersecurity lapses behind a 2022 malware attack.

The penalty imposed is Rs 1 crore.

Failures included leaving an internet-facing server outside critical security controls.

Weak access management and inadequate monitoring of alerts were cited.